HPE Aruba Networking & ProVision-based
1832880 Members
2479 Online
110048 Solutions
New Discussion

Re: ACL in 2920. blocked traffic in both directions

 
ggR
Occasional Contributor

ACL in 2920. blocked traffic in both directions

Good day!

I apologize for my bad english

have vlan 50 and 99

ACL

ip access-list extended "110"
10 deny ip 192.168.99.1 0.0.0.0 0.0.0.0 255.255.255.255
20 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
exit

vlan 50
name "test"
ip access-group "110" vlan-in
ip address 192.168.50.254 255.255.255.0

vlan 99
name "guest"
ip address 192.168.99.254 255.255.255.0

everything is fine, with a host 192.168.99.1 access VLAN 50 no, everyone else sees.
But! 50 vlan not visible and host 192.168.99.1.
Question - why ACL works in both directions? when packets must be processed at VACL included in the VLAN, but not outgoing.

 

1 REPLY 1
16again
Respected Contributor

Re: ACL in 2920. blocked traffic in both directions

Try:

ip access-list extended "110"
10 deny ip 0.0.0.0 255.255.255.255   192.168.99.1 0.0.0.0
20 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255