Unanswered Question
gojericho0 Thu, 04/24/2008 - 05:15

Yes, but it will have to be an extended ACL

Lets say your VLAN range is you can create a ACL targeted for a different network

Router(config)# access-list 101 allow ip any

This would allow any traffic from

You could then place this access list on the SVI of your VLAN

Router(config-if)#ip access-group 101 in

acomiskey Thu, 04/24/2008 - 06:24

The only source addresses from that vlan would be when the acl is applied in.

int vlan 10

ip addr

ip access-group 101 in

If it were applied "out", then the source could be any.


This Discussion