Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
382
Views
5
Helpful
3
Replies

ACL on Vlan interface

pwallace
Level 1
Level 1

‎04-04-2006 10:48 AM - edited ‎03-03-2019 02:38 AM

I am trying to apply an acl on my vlan interfaces that would allow the vlan to initiate tcp traffic. When I apply it I am unable to surf the web from the vlan but I can tftp from the vlan .

Labels:
Preview file
1 KB
0 Helpful
3 Replies 3

Harold Ritter
Cisco Employee
Cisco Employee

‎04-04-2006 11:40 AM

This is normal behavior. The first packet coming from the station on the VLAN would not be considered as established.

On the other hand, the established keyword could be configured on an outbound ACL applied to the same VLAN. This would only allow TCP traffic initiated from the VLAN to reenter that same VLAN.

Hope this helps,

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México

pwallace
Level 1
Level 1
In response to Harold Ritter

‎04-05-2006 09:54 AM

Got it! Thanks! this pointed me in the right direction and I was able to ge the acl like I wanted thanks!

0 Helpful

bhedlund
Level 4
Level 4
In response to pwallace

‎04-05-2006 09:59 AM

pwallace,

Please help the NetPro community by rating Harold's extrememly helpful post.

Thanks. :)

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents