02-10-2007 05:33 AM - edited 03-05-2019 02:16 PM
6513 core switch with MSFC 15 and 16 configured with Inter-vlan routing and static routes to internet.
I want to setup a wireless guest network on school wide network and limit only web access in and out to port 80. I want to create a guest vlan with a VACL to segment.
Is this a good solution and what is the best VACL config?
02-11-2007 10:39 AM
Hi, YEs with the help of vlans u can restric the traffic via source IP, dest IP, Src port & dest port. I wud suggest to create a separate vlan for wireless & on that vlan apply VACL which allow only http traffic.
Hope it will give u some idea.
Thanks
Ninja
02-14-2007 04:30 PM
Thanks jain,
I have the VLAN created with a small subnet. Routing is working to the internet. I'm not sure on the VACL. Do I apply them at the MSFC or the sup?
I've read on VACL's and It's a bit sketchy, I've seen code for both.
Not sure where to apply.
04-06-2007 12:59 PM
I posed this same question to a Cisco tech and was told to apply the vacl to the sup, not the MSFC.
05-11-2007 04:20 AM
Hi,
That was correct...thanks for your help. It works like a charm. Need to do this more often.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide