ACL Creation

oetker1 — Mon, 26 Jan 2015 14:37:17 GMT

Hi,

Please could someone help me with and creating an ACL.

Overview;

On our core switch swithes (2910al) and edge switches (2530)we have 5 VLANS but we have one PC that has a static IP address that I only want to have access to 1 of the VLANS and no other.

but not sure how to write and ACL where you only allow IP address 10.10.10.10 to only have access to VLAN 10 and all other PC still have access to VLAN 10, 20, 30, 40 and 50

And where to apply the ACL

Re: ACL Creation

Vince-Whirlwind — Wed, 28 Jan 2015 01:08:57 GMT

Something like:

On the core switch:

ip access-list extended "restrict-special-host"
deny ip host 10.10.10.10 any
permit ip any any

vlan 10
ip access-group restrict-special-host in

(I am assuming VLAN10 has 10.10.10.0/24 on it)

topic Re: ACL Creation in Security e-Series

ACL Creation

Re: ACL Creation