Configure ACLs For L3 VLANs - Cisco 3550 2

[JRosario78]

Hi everyone,

I configured (3) Layer 3 VLANs on a Cisco 3550 and would like to configure ACLs so that I can block traffic between them.

This is what I have:
VLAN10
SVI - 172.10.1.1

VLAN25
SVI - 172.25.10.1

VLAN163
SVI - 192.168.0.163

If possiable, I would like to allow host 192.168.0.6 to ping any host on the other 2 VLANs.

Thanks in advance!

 

[unclerico]

you're 100% sure that is your requirement?? you don't want ANY other traffic to from ANY other network to pass besides ICMP from that particular host??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[JRosario78]

Hi,

Thanks for your reply/question. Yes, for now that is what I would like to do.

Can you please assist me with this?

Thanks!

 

[unclerico]

absolutely.

access-list 110 permit icmp any host 192.168.0.6 echo-reply
access-list 125 permit icmp any host 192.168.0.6 echo-reply
access-list 163 permit icmp host 192.168.0.6 any eq echo

int vlan 10
  ip access-group 110 in

int vlan 25
  ip access-group 125 in

int vlan 163
  ip access-group 163 in

this will do exactly as you requested which is pemit host 192.168.0.6 to initiate ICMP echo (pings) and for any host on either of the other networks to send ICMP echo replies back to host 192.168.0.6, no other traffic is permitted.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[JRosario78]

Unclerico,

Thanks for your help. I forgot to request that I would also like to allow host 192.168.0.6 to RDP (3389) into the servers on the other VLANs.

I assume that if I create more L3 VLANs, I just creat another ACL like the fist 2 (110 and 125) and then apply it to the SVI.

Thank you!!!
JR

 

[burtsbees]

ip access-list extended 110
5 permit tcp host 192.168.0.6 any eq 3389

ip access-list 125 extended
5 permit tcp host 192.168.0.6 any eq 3389

etc, etc, dot dot dot...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!