VLAN Block

kzhen · ‎06-12-2008

Please advice!!!!!

I have two VLAN's in the switch. Vlan 1: 10.10.10.0/24; Vlan 2: 20.20.20.0/24. The proxy server in Vlan1, which is 10.10.10.10

I would like to do:

1- VLAN2 running DHCP in the switch. VLAN2 should be access to the DHCP server.

2- VLAN2 is able to access to the proxy server 10.10.10.10.

3- VLAN2 is only access to internet via 80 and 443.

4- VLAN2 is not able to access VLAN1.

Please let me know what is the best way to implement.(ps should i use tcp any any established?)

n.nandrekar · ‎06-12-2008

Hi!

You can achieve this through access-list applied on the SVI ( interface vlan ) of 200. Just permit traffic for 10.10.10.10 , deny 10.10.10.0/24, permit any udp to posts 80, 443.

Regards,

Niranjan