MrRude
asked on
Stop InterVLAN routing at the edge.
Here is the scenario. 6509 core, lots of 3750 stacks, 2- 4948-10GE. Router connects to 4948.
Multiple VLANs with inter VLAN routing.
I have NO access to Router. Need to stop a group of VLAN's from communicating to/from the outside world.
Network reconfiguration in progress, but need a quick, down and dirty method to accomplish this.
Can I block these at the port on the 4948 that the router is connected to?
Multiple VLANs with inter VLAN routing.
I have NO access to Router. Need to stop a group of VLAN's from communicating to/from the outside world.
Network reconfiguration in progress, but need a quick, down and dirty method to accomplish this.
Can I block these at the port on the 4948 that the router is connected to?
Is there a trunk on the port? then try: switchport trunk allowed vlan 1,2,3 This way you define which VLAN's are allowed through.
ASKER
OOPS - forgot to mention that.
Not a trunked port. That was my first thought also.
Not a trunked port. That was my first thought also.
Ok.......
Acces list blocking by source address then?
Acces list blocking by source address then?
an ACL will take care of this apply it outbound on the interfaces connecting to the router.
ASKER
Should I also apply it to inbound to stop incoming? I cannot figure out the inverted mask for the ip range i need blocked. Here is the range of IP's I need to block both ways. Is there a wildcard or something? Any suggestions?
192.168.0.0 - 192.168.47.255
192.168.0.0 - 192.168.47.255
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.