VLAN ACL segregation, what am I doing wrong?

Question

We have multiple VLANs. Let's say 15 of them.

We want to segregate VLAN70 from the others.

VLAN10 is..

192.168.1.0, 255.255.255.0

VLAN5 is

192.168.5.0, 255.255.255.0

VLAN70 is

192.168.70.0, 255.255.255.0

For initial testing, I want to prove that I can block VLAN70 from being able to get to VLAN5. I'll build further rules following that.

Using these settings, I can still ping VLAN 5 from 70.

If I remove the '500 permit' extended ACL rule, then it kills all traffic to the VLAN, so I can tell something is working..

Any pointers?

maindriver · Answer

Aha, found the issue, had a Basic ACL that was screwing with the advanced one, removed the basic and all is working.

Forum Discussion