Access Lists and VLANs

Unanswered Question
Mar 22nd, 2010
User Badges:

I have a Cisco 881 router configure with 3 VLANs on three different fastethernet ports. Each vlan has a separate network address vlan2 = 192.168.10.0, vlan3 = 11.0, vlan4 = 12.0

My goal is to keep the VLANs separate from each other.

( Example as: vlan2 should not be able to ping or gain access through the run box typing \\192.168.11.2 to a workstation in vlan3)

One way i thought was to use ACLs to permit and deny.

Each VLAN needs to "get out" to the Internet on fastethernet 4 WAN port.


I need assistance understanding how ACLs work and how to set them in place.

So far, I've tried many different combinations of ACLs with not any success.


attached is a general config

Attachment: 
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Ganesh Hariharan Mon, 03/22/2010 - 22:35
User Badges:
  • Purple, 4500 points or more
  • Community Spotlight Award,

    Member's Choice, February 2016

I have a Cisco 881 router configure with 3 VLANs on three different fastethernet ports. Each vlan has a separate network address vlan2 = 192.168.10.0, vlan3 = 11.0, vlan4 = 12.0

My goal is to keep the VLANs separate from each other.

( Example as: vlan2 should not be able to ping or gain access through the run box typing \\192.168.11.2 to a workstation in vlan3)

One way i thought was to use ACLs to permit and deny.

Each VLAN needs to "get out" to the Internet on fastethernet 4 WAN port.


I need assistance understanding how ACLs work and how to set them in place.

So far, I've tried many different combinations of ACLs with not any success.


attached is a general config

Hi,


In order to deploy ACL you should be clear with the flow of traffic then only you can define the ACL direction in interface,Just check out the below links on some of the examples of ACL's.


http://www.ciscokits.com/pdf-new/All_about_access_control_lists.pdf


http://www.petri.co.il/csc_how_to_use_cisco_ios_access_lists_01.htm


Hope to help !!


Remember to rate the helpful post


Ganesh.H

Actions

This Discussion

Related Content