access list help with vlans

[glennmitel]

hello

i have got a company that i have added a new vlan to

Vlan 7

ip address 192.168.30.250

this is just for guests to use. so i need to allow ports in that vlan to be able to talk to vlan 11 only

vlan 11

ip address 10.10.255.254

could someone point me in the right way

all other vlan must not be changed

thanks

glenn

CCNA,CCNP,CCVP
HP AIS
Full Mitel

 

[unclerico]

access-list 101 remark Permit communication from VLAN7 to VLAN11
access-list 101 permit ip any 10.10.255.0 0.0.0.255
access-list 101 remark implicit deny ip any any follows

Switch(config)# int vlan7
Switch(config-if)# ip access-group 101 in

This will do exactly as you want; permit VLAN7 to communicate with VLAN11 and nothing else.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)