How do I create VLANs on Cisco 6509 using layer 3 routing?

We would like to set up layer 3 routing for our new VLAN101 and open the appropriate ports to allow our traffic to move from our existing Enterprise VLAN172 to an intra VLAN101 for our lab workstations.  A big goal is to prevent http traffic from hitting our lab pc's while giving them access to the appropriate internal network elements.

We have a Cisco 6509
Existing VLAN's  
VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
2    WIFI                             active    
3    DMZ                             active    
9    voice                            active     (VOIP) Internet address is 10.9.x.x/24
101  VLAN0101                  active     (LabNet - New) Internet address is 10.8.x.x/24
172  VLAN0172                  active     (Enterprise Network) Internet address is 172.16.x.x/16

Looking for guidance on best practice settting this up.

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Don JohnstonInstructorCommented:
This will create vlan 101 and the layer 3 interface.  The ACL will block web requests from the enterprise network from accessing the Lab network.

conf t
access-list 180 deny tcp any eq 80
access-list 180 permit ip any any
vlan 101
 name LabNet
int vlan 101
 ip address 10.8.x.x
 ip access-group 180 out
 no shut

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
XTADMINAuthor Commented:
Thank You!  This config seems to be working fine.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Architecture

From novice to tech pro — start learning today.