Deny traffic between 2 Vlans

[stikekar]

I want to create a firewall betwen the Police Department and City Hall. Police department should have full acess to City Hall and the internet via City Hall but City Hall should only have access to some servers at Police Department. Currently Cityhall is on a 6509 with a 10.0.0.0 subnet VLANS and PD is on a 172.22.9.0 network. There is trunking between the two networks.

I am very new to Access lists and therefore struggling with this challenging problem.

Any help will be greatly appreciated. One thing I surely want to use is extended access lists and apply them to the VLAN interface.

Thanks in advance for ASAP help.

[ali-franks]

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

[stikekar]

Thanks. I will look over the document and try it.

[raymond.leung]

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a00801609f6.html