1748198 Members
2646 Online
108759 Solutions
New Discussion

vlan acls

 
BrianCC
New Member

vlan acls

Hi, I'm trying to prevent vlan 4 (172.26.96.0/22 from accessing all other vlans.

but

I would like vlan 4 to be able to access 172.24.1.4 on udp 67

and

I would like vlan 4 to be able to access the internet default gateway

 

Procurve 5400

 

Thanks,

Brian

2 REPLIES 2
Tausif-M
Member

Re: vlan acls

Dear

 

Plz try the below..

 

1. for preventing vlan 4 from all other vlans

20 deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255

2. for allowing vlan 4 to communictae 172.24.1.4 on UDP 67

11 permit udp 0.0.0.0 255.255.255.255 172.24.1.4 0.0.0.0 eq 67

3. For allowing vlan 4 to communicate default gateway

10 permit ip 0.0.0.0 255.255.255.255 X.X.X.X 255.255.255.255

Where X.X.X.X is your Default Gateway.

16again
Respected Contributor

Re: vlan acls

Try below. Maybe syntax isn;t 100% , but I'm doing too much vendors at the moment
#first, pass dhcp requests:
permit udp any any eq 67
#allow pinging the GW: (assuming .1 is GW)
permit icmp any host 172.26.96.1
#Block other VLANs, assuming they are RFC1918 networks
deny ip any 10.0.0.0  0.255.255.255
deny ip any 192.168.0.0  0.0.255.255
deny ip any 172.16.0.0  0.15.255.255
#Permit internet access
permit ip any any