cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
207
Views
0
Helpful
1
Replies

vlans access-list

jahilnt10
Level 1
Level 1

I have cisco WS-C3550-24-SMI running ip routing.

I have three customers and they fall in their own valns as listed:

interface FastEthernet0/10

switchport access vlan 10

no ip address

spanning-tree portfast

interface Vlan10

description cust2

ip address 1.1.6.37 255.255.255.252

ip access-group inbound in

ip access-group outbound out

interface FastEthernet0/11

switchport access vlan 11

no ip address

spanning-tree portfast

interface Vlan11

description cust3

ip address 1.1.7.41 255.255.255.252

ip access-group inbound in

ip access-group outbound out

Than I have another vlan the one pointing to router

interface FastEthernet0/1

switchport access vlan 14

no ip address

load-interval 30

duplex full

speed 100

spanning-tree portfast

interface Vlan14

description wireless

ip address 192.168.1.1 255.255.255.0

ip access-group inbound in

ip access-group outbound out

This all worked fine. The problem is there is traffic on physical ports and I can't see traffic on VLAN. For example when I execute this command show interface vlan 14. I just some kb traffic while there is more than 10Mb traffic on Fe 0/1. Same for other vlans.

Also access-lists are not working proprely. How do you guys use switches when you need to use your switch as intervlan router and access-lists on vlan or port bases?

1 Reply 1

dbellaze
Level 4
Level 4

If you want to apply policy to traffic inside the VLAN your best bet will be VLAN maps.

http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_guide_chapter09186a00805a7045.html#wp1176911

You can't use port based ACL's in conjunction with your current ACL configuration.

Daniel

Review Cisco Networking products for a $25 gift card