OpenForum RSS: ACL VLAN IN / OUT

ACL VLAN��IN��/ OUT (Serb)

Thu, 29 Nov 2012 15:31:02 GMT

>[�� ]
>>> ��
>>> �ϣ� �� Vlan2 �.� �� ,,,
>> �� , �� , ��
>> �� , � ��
> ��...
> �� 3 Vlan,,, Vlan1 Vlan2 Vlan3
> Vlan1 ( �� ) Vlan2 Vlan3 ��
> �� V2-V3 �� V1 �� ̣�� ip, ��
> �� .
> �� ACL �� V2-V3 ???

dostatochno. no ya bi delal tak

dostup v vlan1 - vlan1 out acl
dostup v vlan2 - vlan 2 out acl
dostup v vlan3 - vlan3 out acl

ACL VLAN��IN��/ OUT (peering)

Thu, 29 Nov 2012 06:43:20 GMT

>[�� ]
>>> access-list 120 permit ip host 192.168.10.10 host 192.168.0.95
>>> access-list 121 permit ip host 192.168.0.95 host 192.168.10.10
>>> access-list 119 permit ip host 192.168.0.95 host 192.168.10.10
>>> host 192.168.10.10 - > fa0/vlan2 <-> vlan 2 -
>>> vse rabotaet i hodit ACL ne proveryaetsya voobshe (tak kal 120
>>> - l3 extended ACL)
>> ��
>> �ϣ� �� Vlan2 �.� �� ,,,
> �� , �� , ��
> �� , � ��

��...

�� 3 Vlan,,, Vlan1 Vlan2 Vlan3

Vlan1 ( �� ) Vlan2 Vlan3 ��

�� V2-V3 �� V1 �� ̣�� ip, �� .

�� ACL �� V2-V3 ???

ACL VLAN��IN��/ OUT (Serb)

Thu, 29 Nov 2012 05:32:15 GMT

>[�� ]
>> ip access-group 122 out
>> access-list 122 permit ip host 192.168.10.10 host 192.168.0.95
>> access-list 120 permit ip host 192.168.10.10 host 192.168.0.95
>> access-list 121 permit ip host 192.168.0.95 host 192.168.10.10
>> access-list 119 permit ip host 192.168.0.95 host 192.168.10.10
>> host 192.168.10.10 - > fa0/vlan2 <-> vlan 2 -
>> vse rabotaet i hodit ACL ne proveryaetsya voobshe (tak kal 120
>> - l3 extended ACL)
> ��
> �ϣ� �� Vlan2 �.� �� ,,,

�� , �� , �� , � ��

>> traffic ot host 192.168.10.10 k 192.168.0.95 - > fa0/vlan2
>> - ACL120-in na vlan 2 (so 192.168.10.10 de 192.168.0.95 )->
>> fa1/Vlan1 -> acl 122-out na vlan 1 (so 192.168.10.10
>> de 192.168.0.95 ) -> 192.168.0.95
>> traffic k host 192.168.10.1

ACL VLAN��IN��/ OUT (peering)

Thu, 29 Nov 2012 04:20:25 GMT

>[�� ]
> ip address 192.168.0.1 255.255.255.0
> ip access-group 121 in
> ip access-group 122 out
> access-list 122 permit ip host 192.168.10.10 host 192.168.0.95
> access-list 120 permit ip host 192.168.10.10 host 192.168.0.95
> access-list 121 permit ip host 192.168.0.95 host 192.168.10.10
> access-list 119 permit ip host 192.168.0.95 host 192.168.10.10
> host 192.168.10.10 - > fa0/vlan2 <-> vlan 2 -
> vse rabotaet i hodit ACL ne proveryaetsya voobshe (tak kal 120
> - l3 extended ACL)

�� ϣ� �� Vlan2 �.� �� ,,,

> traffic ot host 192.168.10.10 k 192.168.0.95 - > fa0/vlan2
> - ACL120-in na vlan 2 (so 192.168.10.10 de 192.168.0.95 )->
> fa1/Vlan1 -> acl 122-out na vlan 1 (so 192.168.10.10
> de 192.168.0.95 ) -> 192.168.0.95
> traffic k host 192.168.10.10 ot 192.168.0.95 -> fa1/vlan1 - ACL121-in (so
> 192.168.0.95 de 192.168.10

ACL VLAN��IN��/ OUT (peering)

Thu, 29 Nov 2012 04:16:32 GMT

>[�� ]
>> �� (Vlan1) ip 192.168.0.95 �� (vlan2) 192.168.10.10
>> �� vlan2 ��:
>> ip access-group 120 in
>> access-list 120 permit ip host 192.168.10.10 host 192.168.0.95
>> �� ,, �� ....
>> 1) �� , ��
>> �� IN, �� 192.168.10.10 ( ��)
>> 192.168.0.95 (��). �� out.
> �� in, ��
> � ��. �� .

�� https://supportforums.cisco.com/thread/2115619
�� in / out
��

ACL VLAN��IN��/ OUT (crash)

Thu, 29 Nov 2012 02:39:38 GMT

>[�� ]
> - cisco 871
> - 2 valn �� L2 ( vlan1, Vlan2)
> �� (Vlan1) ip 192.168.0.95 �� (vlan2) 192.168.10.10
> �� vlan2 ��:
> ip access-group 120 in
> access-list 120 permit ip host 192.168.10.10 host 192.168.0.95
> �� ,, �� ....
> 1) �� , ��
> �� IN, �� 192.168.10.10 ( ��)
> 192.168.0.95 (��). �� out.

�� in, �� . �� .

ACL VLAN��IN��/ OUT (Serb)

Wed, 28 Nov 2012 17:42:39 GMT

>[�� ]
>> � �� out �� ....
>>> traffic ot host 192.168.10.10 k 192.168.0.95 - > fa0/vlan2
>>> - ACL120-in na vlan 2 (so 192.168.10.10 de 192.168.0.95 )->
>>> fa1/Vlan1 -> acl 122-out na vlan 1 (so 192.168.10.10
>>> de 192.168.0.95 ) -> 192.168.0.95
>>> traffic k host 192.168.10.10 ot 192.168.0.95 -> fa1/vlan1 - ACL121-in (so
>>> 192.168.0.95 de 192.168.10.10) - > fa0/vlan2 -> acl 119-out (so 192.168.0.95
>>> de 192.168.10.10)
> ��-�� vlan 2 �� src IP
> 192.168.10.10 �� IN ��.

da IN, y vrode ne utverzhdal obratnoe

ACL VLAN��IN��/ OUT (fantom)

Wed, 28 Nov 2012 08:15:58 GMT

>[�� ]
> permit ip host 192.168.10.11 host 192.168.0.95 �� .
> ping �� ..
> � �� out �� ....
>> traffic ot host 192.168.10.10 k 192.168.0.95 - > fa0/vlan2
>> - ACL120-in na vlan 2 (so 192.168.10.10 de 192.168.0.95 )->
>> fa1/Vlan1 -> acl 122-out na vlan 1 (so 192.168.10.10
>> de 192.168.0.95 ) -> 192.168.0.95
>> traffic k host 192.168.10.10 ot 192.168.0.95 -> fa1/vlan1 - ACL121-in (so
>> 192.168.0.95 de 192.168.10.10) - > fa0/vlan2 -> acl 119-out (so 192.168.0.95
>> de 192.168.10.10)

��-�� vlan 2 �� src IP 192.168.10.10 �� IN ��.

ACL VLAN��IN��/ OUT (peering)

Wed, 28 Nov 2012 07:34:44 GMT

>[�� ]
> ip address 192.168.0.1 255.255.255.0
> ip access-group 121 in
> ip access-group 122 out
> access-list 122 permit ip host 192.168.10.10 host 192.168.0.95
> access-list 120 permit ip host 192.168.10.10 host 192.168.0.95
> access-list 121 permit ip host 192.168.0.95 host 192.168.10.10
> access-list 119 permit ip host 192.168.0.95 host 192.168.10.10
> host 192.168.10.10 - > fa0/vlan2 <-> vlan 2 -
> vse rabotaet i hodit ACL ne proveryaetsya voobshe (tak kal 120
> - l3 extended ACL)

� �� access-list 120 permit ip host 192.168.10.10 host 192.168.0.95 �� access-list 120 permit ip host 192.168.10.11 host 192.168.0.95 �� . ping �� ..
� �� out �� ....

> traffic ot host 192.168.10.10 k 192.168.0.95 - > fa0/vlan2
> - ACL120-in na vlan 2 (so 192.168.10.10 de 192.168.0.95 )->
> fa1/Vlan1 -> acl 122-out na vlan 1 (so 192.168.10.10
> de 192.168.0.9