VLAN ACL policies

[lraikhman]

Hi,

I need some help with a 3com 4500G switch. I've read the documentation but either I don't understand it well or it's too sparse.

Basically, I want to build a VLAN ACL that contains a few rules.

Here's my setup:

traffic classifier vlan-11 operator and
if-match acl 3000
#
traffic behavior permit
filter permit
traffic behavior deny
filter deny
#
qos policy vlan-11
classifier vlan-11 behavior deny
#
acl number 3000
rule 0 deny ip source 192.168.11.0 0.0.0.255 destination 192.168.12.0 0.0.0.255
#
qos vlan-policy vlan-11 vlan 11 inbound


Basically, what I want to do is deny any traffic to VLAN 12 (192.168.12.0/24) except RDP to a particular IP (192.168.12.20).

The only problem is that as soon as I add a permit statement to the acl (3000) and apply it, it doesn't work - so I'm evidently doing something wrong

Can someone tell me what I'm doing wrong, please? I've been tearing my hair out

Thanks,
Leo

 

[SLMHC]

You ever find out how to do this? I'm doing something similar with a 4500 and agree that the 3com docs are a tad sparse.

-Dave