lonekawboy
asked on
Blocking layer 3 traffic on a Cisco 3560-X switch
I have a 3560X switch that I have routing turned on for and I would like to block all traffic from one specific vlan to all others. I have the following vlans:
VLAN 20 IP Address 10.2.0.14 255.255.0.0
VLAN 23 IP Address 10.23.0.1 255.255.0.0
I have ip routing turned on and I see routes.
I want to block traffic from vlan 23 to vlan 20 and I thought this would work:
access-list 101 deny ip 10.23.0.0 0.0.255.255 any
access-list 101 permit ip any any
vlan 20
ip access-group 101 in
I can still ping 10.2.0.14 from 10.23.0.100.
Ideas?
VLAN 20 IP Address 10.2.0.14 255.255.0.0
VLAN 23 IP Address 10.23.0.1 255.255.0.0
I have ip routing turned on and I see routes.
I want to block traffic from vlan 23 to vlan 20 and I thought this would work:
access-list 101 deny ip 10.23.0.0 0.0.255.255 any
access-list 101 permit ip any any
vlan 20
ip access-group 101 in
I can still ping 10.2.0.14 from 10.23.0.100.
Ideas?
Last Comment
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Don Johnston
Or you could use your existing ACL and apply it outbound on the VLAN 20 interface.
vlan 23 -> 20
access-list 101 deny ip 10.23.0.0 0.0.255.255 10.2.0.0 0.0.255.255
access-list 101 permit ip any any
int vlan 23
ip access-group 101 in
access-list 101 deny ip 10.23.0.0 0.0.255.255 10.2.0.0 0.0.255.255
access-list 101 permit ip any any
int vlan 23
ip access-group 101 in
Ciscocert:
Was it really necessary to post the exact same ACL that Frabble posted an hour earlier?
Was it really necessary to post the exact same ACL that Frabble posted an hour earlier?
Routers
A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.
49K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
