cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 

ACL one way

ACL one way

Kamal_FIKRI
New Contributor
Hello,
I need to create an access list based on subnet IP source and destination and applied in a VLAN interface, the ACL work fine when we need to block all traffic, but when we try to block the traffic in one way like reflexive ACL in Cisco it doesn't work, here is my ACL:
entry DenyInterVlanRouting {
if match all {
source-address 10.10.1.110/32;
destination-address 10.10.128.245/32;
}
then {
deny ;
}
}
I want to block only from 10.10.1.110 to 10.10.128.245 and allow in the return path.
10 REPLIES 10

Giuseppe_Montan
Contributor

Hi, did you fint a way to solve this issue ?

Giuseppe

Kamal_FIKRI
New Contributor
Can i make inter vlan isolation, i mean block communication using vlan id with some exception ?

Senguttuvan__Ar
Extreme Employee
Ping might not work because you are blocking the return traffic.

I prefer you open a case with TAC.

Kamal_FIKRI
New Contributor
for your question, my goal is to block traffic from 10.10.10.58 to 10.10.128.20 and allow 10.10.128.20 to 10.10.10.58. i can ping between theme when there is no ACL, this is how i validate that traffic is forwarded in the Switch,
I tried to make a second ACL to permit ingress traffic in 128 vlan interface but it still blocked
GTM-P2G8KFN