ACLs on Procurve 3500

[spqr2001]

I am new to creating ACLs, but here is what I am wanting to do. I have a Procurve 3500 split into two VLANs. The first VLAN is a private, internal VLAN with an IP scheme of 10.0.0.1/24. The second VLAN is designed to run a public WiFi system and has the IP scheme of 10.1.1.1/24. What I am wanting is to create an ACL that allows both VLANs to talk both ways to the internet source which is 10.0.0.2. Then I need to be able to talk from two servers (10.0.0.1, 10.0.0.3) to the wireless VLAN so I can manage the APs remotely, but not have the wireless VLAN be able to initiate communication so the internal network stays secure. Anyone able to assist?

 

[unclerico]

Consult this doc first and see if you can make sense of it. if you still have questions, post back and we'll help you out:

http://cdn.procurve.com/training/Manuals/3500-5400-6200-8200-ASG-Jan08-10-ACLs.pdf

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[VinceWhirlwind]

What about:

ip access-list extended "Wireless"
deny ip 10.1.1.0 0.0.0.255 10.0.0.0 0.0.0.255
permit ip 10.1.1.0 0.0.0.255 0.0.0.0 255.255.255.255

vlan 1
ip address 10.0.0.1 255.255.255.0
ip access-group "Wireless" out