VACL? or RACL?

[Captain_Kplunk]

Hi,
We've got 2 x 3500yl switches connected via a 1gb link.

The two sites they represent share a subnet: 192.168.246.0/24 (this was subnetted in half using/25 previously).

I'd like to only allow 192.168.246.0 traffic to use the connection (and obviously traffic from other subnets who's destination is that particular subnet) to keep it dedicated only for a specific purpose.

We also have a 100mb connection between the two sites that handle normal data and voice on different subnets, I don't want them using this 1gb link.

So, would you say that I'd need to set up a VACL? or an RACL? and how would I do this?

The vlan between the two will be Vlan 999 (if I need to use one...) I have an entire class C 246 range (as mentioned above), so should I just spread the lan on these two switch ports, or route them?

Any help greatly appreciated.
Captain_kplunk.

[Captain_Kplunk]

Can anyone help?

[groque]

I would use a VACL to do this. I would only use RACL for device based ACL's for example if you want to restrict specific users access to different resources I would use RACL's but for anything generic use VACL's