Wired Intelligent Edge

 View Only
Expand all | Collapse all

EXTENDED ACL between two different vlans

This thread has been viewed 1 times
  • 1.  EXTENDED ACL between two different vlans

    Posted Jun 05, 2020 08:18 AM

    Hi,

     

    Actually i wanted to configure access list between 2 vlans. 

     

    vlan 5
    name "VLAN5"
    untagged 1
    ip address 10.0.0.8 255.255.255.0
    vlan 10
    name "VLAN10"
    untagged 2
    ip address 172.16.5.252 255.255.254.0

    I want ip 10.0.0.2 to be able to communicate with 172.16.5.251.

    How can i achieve this ?

    I tried:

    ip access-list extended ACL

    permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 

    vlan 5

    ip access-group ACL in

    With this command network 172.16.5.0 can talk with 10.8.0.0.

    But I wanted to permit only specific IP only to be allowed to communicated.

    Any help ?

    Thanks & Regards



  • 2.  RE: EXTENDED ACL between two different vlans

    Posted Jun 07, 2020 05:46 PM

    Hi,

    When you say extended, ACL, do you mean advanced ACL.

    Can you please describe the issue in details?

    As per your statement,: "I want ip 10.0.0.2 to be able to communicate with 172.16.5.251.", it seems you are trying to do intervlan communication.

    Are these two vlan in same device?

    Also please refer below link to configure ACL:

    https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00077562en_us

     

    Thanks!