https://community.extremenetworks.com/t5/data-center-vdx/vdx-6740-acl-or-what/m-p/6319#M211 hi gents<BR /> <BR /> I have a vlanAA with an interface IP, say 10.1.1.1, which is an uplink to the "outside"<BR /> I have more vlans in my logical chassis.<BR /> <BR /> I'm looking for recommendation, suggestion on how to best:<BR /> a) protect(deny) 10.1.1.1 from/against the outside, or anybody for that mater, except for maybe allowing a MAC/IP - that would be ACLs, right?<BR /> b) protect(deny) traffic from/via vlanAA(or any traffic sourcing from vlanAA) to any other vlans/ports in my logical chassis - does it have to be ACLs?<BR /> <BR /> I'd appreciate very much a rough programmatic sketch on how should you get it done.<BR /> Many thanks. Tue, 29 Jan 2019 21:18:00 GMT Pawel_Eljasz 2019-01-29T21:18:00Z https://community.extremenetworks.com/t5/data-center-vdx/vdx-6740-acl-or-what/m-p/6319#M211 hi gents<BR /> <BR /> I have a vlanAA with an interface IP, say 10.1.1.1, which is an uplink to the "outside"<BR /> I have more vlans in my logical chassis.<BR /> <BR /> I'm looking for recommendation, suggestion on how to best:<BR /> a) protect(deny) 10.1.1.1 from/against the outside, or anybody for that mater, except for maybe allowing a MAC/IP - that would be ACLs, right?<BR /> b) protect(deny) traffic from/via vlanAA(or any traffic sourcing from vlanAA) to any other vlans/ports in my logical chassis - does it have to be ACLs?<BR /> <BR /> I'd appreciate very much a rough programmatic sketch on how should you get it done.<BR /> Many thanks. Tue, 29 Jan 2019 21:18:00 GMT https://community.extremenetworks.com/t5/data-center-vdx/vdx-6740-acl-or-what/m-p/6319#M211 Pawel_Eljasz 2019-01-29T21:18:00Z