Guest vlan ACL

[childersm2]

Hi all,

I am new to ACL's. 

I have a guest network setup on vlan 300

I am righting an ACL for the guest network to block access to the corp network.

I want to allow http, https, DNS to google DNS  and access to the dhcp that is being handed out by the switch.

This is what I have so far.

10 permit tcp 172.16.16.0 0.0.0.255 any host 172.16.16.1 eq 53 8.8.8.8 0.0.0.0

20 permit tcp 172.16.16.0 0.0.0.255 any host 172.16.16.1 eq "not sure how to grant DHCP access since the switch is handing out DHCP on that vlan.

30 deny ip any any

Any help would be great thank you,

[San0707]

Hi,

For allowing any particular service , need to mention equivalent TCP or UDP port no.

command format varies from switch type and firmware used.

it can be found in refrence guide accordingly.

Thanks

San0707

i am HPE Employee