cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
316
Views
0
Helpful
2
Replies

VLAN ACL

cdetirado01
Level 1
Level 1

I have a switch, and I want to configure a trunk port to not communicate between VLAN 61 to 71. I tried putting an ACL on the VLAN interface and it did not work

2 Replies 2

Jon Marshall
Hall of Fame
Hall of Fame

Carlos

Not sure i fully understand. Do you want to stop all communication between vlan 61 & vlan 71. If so assuming

vlan 61 = 192.168.5.0/24

vlan 71 = 192.168.6.0/24

access-list 101 deny ip 192.168.5.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list permit ip any any

int vlan 61

ip access-group 101 in

Jon

muca
Level 3
Level 3

Why don't you limit which vlan's can be trunked over the link using switchport trunk allowed vlan command?

switchport trunk allowed vlan 1,2,5,10

or

switchport trunk allowed vlan remove 61, 71

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: