Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

ACL on 4500 / 5500 Switch

Status
Not open for further replies.

ciro64

IS-IT--Management
Feb 2, 2007
8
LI
Hi
I need to config ACL on a 5500 Switch, but i can only activate 1 ACL on a port.
My config:
for allow all:
qos ip-acl name "allow_all" drop-action disable set-drop-prec low-drop block vlan75

for allow Web Access:
qos ip-acl name all99port80 dst-ip 192.168.99.0/24 protocol 6 dst-port-min 80 dst-port-max 80 drop-action disable set-drop-prec low-drop block vlan75

for allow all in my own Vlan:
qos ip-acl name "all_vlan75" dst-ip 192.168.75.0/24 drop-action disable set-drop-prec low-drop block vlan75

I activated 2 ACTs on port 2:
qos acl-assign port 2 acl-type ip name all99port80
qos acl-assign port 2 acl-type ip name "all_vlan75"

Now only "all99port80" ist active. I can config a second ACL on port2, but it's never active.

What ist wrong ?

Thanks a lot
Nik
 
After a break, i found the Code:
qos ip-acl name VLAN75 dst-ip 192.168.99.0/24 protocol 6 dst-port-min 80 dst-port-max 80 drop-action disable set-drop-prec low-drop

qos ip-acl name VLAN75 dst-ip 192.168.75.0/24 drop-action disable set-drop-prec low-drop

qos acl-assign port 2 acl-type ip name VLAN75

Now i can connect in my vlan and to de Web in 192.168.99.0.

Hey thats easy
Nik

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top