commands to turn on vlans

[tvanderb]

I want to create an access-list to deny traffic from vlan 200 and 500 to vlans 300 and 400 on an Hp 5308. These are the commands I am using.
ip access-list standard 10 (works)
deny ip xxx.xxx.xxx.xxx/16 yyy.yyy.yyy.yyy/16 (doesn't work)
xxx is the source subnet and yyy is the destination subnet.
I keep getting the error "invalid input: ip"
What am I doing wrong?

These are the rest of the commands I intend to use to finish it. If I'm messed up there too, please let me know.

Permit any any

vlan 300>ip access-group 10 in
vlan 400>ip access-group 10 in


Thanks,
Teresa

 

[JBruyet]

Shouldn't the /16 go at the end of an IP address instead of the subnet? Try dropping the /16 and see if that works.

FWIW,

Joe