Link to home
Create AccountLog in
Avatar of MrRude
MrRude

asked on

Stop InterVLAN routing at the edge.

Here is the scenario. 6509 core, lots of 3750 stacks, 2- 4948-10GE. Router connects to 4948.
Multiple VLANs with inter VLAN routing.
I have NO access to Router. Need to stop a group of VLAN's from communicating to/from the outside world.

Network reconfiguration in progress, but need a quick, down and dirty method to accomplish this.

Can I block these at the port on the 4948 that the router is connected to?

Avatar of Ernie Beek
Ernie Beek
Flag of Netherlands image

Is there a trunk on the port? then try: switchport trunk allowed vlan 1,2,3 This way you define which VLAN's are allowed through.
Avatar of MrRude
MrRude

ASKER

OOPS - forgot to mention that.
Not a trunked port. That was my first thought also.
Ok.......

Acces list blocking by source address then?
an ACL will take care of this apply it outbound on the interfaces connecting to the router.
Avatar of MrRude

ASKER

Should I also apply it to inbound to stop incoming? I cannot figure out the inverted mask for the ip range i need blocked. Here is the range of IP's I need to block both ways. Is there a wildcard or something? Any suggestions?

192.168.0.0 - 192.168.47.255
ASKER CERTIFIED SOLUTION
Avatar of Ernie Beek
Ernie Beek
Flag of Netherlands image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer