<div>
Wouldn't you need to reorder your access-list ? &nbsp;Permit the host you want first then deny its subnet.<br />
<br />
ip access-list extended storage-vlan permit ip host 192.168.1.39 192.168.150.0 0.0.0.255 log<br />
ip access-list extended storage-vlan deny ip 192.168.0.0 0.0.0.255 192.168.150.0 0.0.0.255 log<br />
ip access-list extended storage-vlan deny ip 192.168.1.0 0.0.0.255 192.168.150.0 0.0.0.255 log<br />
ip access-list extended storage-vlan permit any any<br />

</div>


Wouldn't you need to reorder your access-list ?  Permit the host you want first then deny its subnet.

ip access-list extended storage-vlan permit ip host 192.168.1.39 192.168.150.0 0.0.0.255 log
ip access-list extended storage-vlan deny ip 192.168.0.0 0.0.0.255 192.168.150.0 0.0.0.255 log
ip access-list extended storage-vlan deny ip 192.168.1.0 0.0.0.255 192.168.150.0 0.0.0.255 log
ip access-list extended storage-vlan permit any any


<div>
<div class="content wysiwyg-content">
Hi,<br />
I would like to create an access list for VLAN 150. &nbsp;Here is what I would liek to do. &nbsp;I would like to deny 192.168.0.0/23 from accessing 192.168.150.0/24. &nbsp;I would like to permit 192.168.1.39 to communicate with 192.168.150.0/24. This is a cisco 3560g switch. From what I could find I should be able to run the below commands<br />
ip access-list extended storage-vlan &nbsp;deny 192.168.0.0 0.0.0.255 192.168.150.0 0.0.0.255 log<br />
ip access-list extended storage-vlan &nbsp;deny 192.168.1.0 0.0.0.255 192.168.150.0 0.0.0.255 log<br />
ip access-list extended storage-vlan permit 192.168.1.39 0.0.0.255 192.168.150.0 0.0.0.255 log<br />
ip access-list extended storage-vlan permit any any<br />
This does not seem to get what i want, which is only allow the 192.168.1.39 ip address access to vlan 150.
</div>
</div>


Hi,
I would like to create an access list for VLAN 150.  Here is what I would liek to do.  I would like to deny 192.168.0.0/23 from accessing 192.168.150.0/24.  I would like to permit 192.168.1.39 to communicate with 192.168.150.0/24. This is a cisco 3560g switch. From what I could find I should be able to run the below commands
ip access-list extended storage-vlan  deny 192.168.0.0 0.0.0.255 192.168.150.0 0.0.0.255 log
ip access-list extended storage-vlan  deny 192.168.1.0 0.0.0.255 192.168.150.0 0.0.0.255 log
ip access-list extended storage-vlan permit 192.168.1.39 0.0.0.255 192.168.150.0 0.0.0.255 log
ip access-list extended storage-vlan permit any any
This does not seem to get what i want, which is only allow the 192.168.1.39 ip address access to vlan 150.

Creating Access List for Vlan

Networking software modules are interfaced with a framework implemented on the machine's operating system that implements the networking functionality of the operating system. The best known frameworks are the TCP/IP model and the OSI model. Systems typically do not use a single protocol to handle a transmission. Instead they use a set of cooperating protocols, sometimes called a protocol family or protocol suite.[9] Some of the best known protocol suites include: IPX/SPX, X.25, AX.25, AppleTalk and TCP/IP. Other protocols indirectly related to networking include the hypertext transfer protocol (HTTP) and its related technologies, Dynamic Host Configuration Protocol (DHCP), Domain Name Server (DNS) and other Internet protocols.

Networking Protocols

Network Management involves issues that are independent of specific hardware or software, including email policies, upgrade planning, backup scheduling and working with managed service providers for Desktop-As-A-Service (DaaS), Software-As-A-Service (SaaS) and the like through the use of tools, coupled with manufacturer standards, best practice guidelines, policies and procedures plus all other relevant documentation. Network management also includes monitoring, alerting and reporting, management reporting, planning for device or service updates, the backup of configurations, the setting of key performance indicators and measures (KPIs/KPMs), associated service level agreements and problem records as part of the IT Service Management (ITSM) framework.

Network Management

A switch is a device that filters and forwards packets of data between LAN segments. Switches operate at the data link layer or the network layer of the Open Systems Interconnection (OSI) Reference Model and therefore support any packet protocol. LANs that use switches to join segments are called switched LANs or, in the case of Ethernet networks, switched Ethernet LANs. A hub is a connection point for devices in a network. Hubs are commonly used to connect segments of a LAN. A hub contains multiple ports; when a packet arrives at one port, it is copied to the other ports so that all segments of the LAN can see all packets.