Allow Only to Firewall

[solson]

I have a VLAN setup for testing and I would like to have access to the internet through our firewall. I also need to allow this VLAN to only talk to the firewall and no other devices on the network.

The firewall is an MS ISA box that knows the routes to the rest of the network.

How do I use an access list to allow this vlan to only talk to the firewall and no one else?

Please be gentle...I am new at this access list stuff.

 

[routerman]

The VLAN can have an ACL applied like any other interface.

If the firewall is an ISA box does it act as a proxy?

To limit access to the firewall IP only:

access-list 105 permit ip any host <firewall-ip>

int VLAN20
access-group 105 out

This should do, will allow any device to access the firewall IP only, the rest will be dropped. Hope this is really what you want?

 

[Syty]

Just remember that at the end of every access-list, whether you specify it or not is an implicit deny

If you don't permit it, it won't go............

 

[solson]

Thank you both. That seems to do the trick.