05-18-2007 12:41 PM - edited 03-05-2019 04:10 PM
how can i filter the inter-vlan routing on a layer 3 switch? i want to route between all vlans except for the management vlan (preventing access vlan traffic from getting to the mgmt vlan and vice versa). is this just done with access lists? can someone please give me an example?
thanks!
matt
05-18-2007 12:52 PM
Could be something as simple as this...
access-list 100 deny ip any
access-list 100 permit ip any any
int vlan 100 (not management vlan)
access-group 100 in
05-18-2007 01:03 PM
Matt
I might suggest that a slightly different title for your post might be a bit more appropriate: filtering inter VLAN traffic (rather than routes). Since you seem to be dealing with a layer 3 switch and connected interface routes there is not any way to filter the routes (filtering routes is only possible when routes are advertised between routers or layer 3 switches).
But filtering traffic between VLANs is very posible and Adam has provided an example of how to do that.
HTH
Rick
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide