Switches, Hubs, and Modems
cancel
Showing results for 
Search instead for 
Did you mean: 

Guest vlan ACL

 
childersm2
Occasional Visitor

Guest vlan ACL

Hi all,

I am new to ACL's. 

I have a guest network setup on vlan 300

I am righting an ACL for the guest network to block access to the corp network.

I want to allow http, https, DNS to google DNS  and access to the dhcp that is being handed out by the switch.

This is what I have so far.

10 permit tcp 172.16.16.0 0.0.0.255 any host 172.16.16.1 eq 53 8.8.8.8 0.0.0.0

20 permit tcp 172.16.16.0 0.0.0.255 any host 172.16.16.1 eq "not sure how to grant DHCP access since the switch is handing out DHCP on that vlan.

30 deny ip any any

Any help would be great thank you,

 

1 REPLY 1
San0707
Occasional Advisor

Re: Guest vlan ACL

Hi,

For allowing any particular service , need to mention equivalent TCP or UDP port no.

command format varies from switch type and firmware used.

it can be found in refrence guide accordingly.

 

Thanks

San0707

i am HPE Employee