ProCurve / ProVision-Based
cancel
Showing results for 
Search instead for 
Did you mean: 

Procurve 5308xl Vacls

KomninosMinas
Regular Visitor

Procurve 5308xl Vacls

I have one 5308xl with enable ip routing as backbone switch with with some vlans on it

Vlan A 172.16.1.1 /24

Vlan B 172.16.10.1  /24 Servers

Vlan C 172.16.20.1 /24 users

 

I want to enable on Vlan B and on Vlan C ACL to allow users from vlan C to talk to specified applications on vlan B one way ,but I don’t know how can I permit established connection acl on vlan c to allow only the established  connections from vlan b . The permit tcp host host established not exist in the 5308xl

Vlan B (Vlan b ip access-group vlanbout out)

Ip access-list extended vlanbout

Permit tcp 172.16.20.0 0.0.0.255 172.16.10.0 0.0.0.255 eq 3389

Deny ip any any

 

Vlan C  (Vlan C ip access-group vlancout out)

 Ip access-list extended vlancout

Permit tcp 172.16.1.1 0.0.0.255 172.16.20.1 0.0.0.255

Deny ip any any