ACL one way

[Kamal_FIKRI]

Hello,
I need to create an access list based on subnet IP source and destination and applied in a VLAN interface, the ACL work fine when we need to block all traffic, but when we try to block the traffic in one way like reflexive ACL in Cisco it doesn't work, here is my ACL:
entry DenyInterVlanRouting {
if match all {
source-address 10.10.1.110/32;
destination-address 10.10.128.245/32;
}
then {
deny ;
}
}
I want to block only from 10.10.1.110 to 10.10.128.245 and allow in the return path.

[Giuseppe_Montan]

Hi, did you fint a way to solve this issue ?

Giuseppe

[Kamal_FIKRI]

Can i make inter vlan isolation, i mean block communication using vlan id with some exception ?

[Senguttuvan__Ar]

Ping might not work because you are blocking the return traffic.

I prefer you open a case with TAC.

[Kamal_FIKRI]

for your question, my goal is to block traffic from 10.10.10.58 to 10.10.128.20 and allow 10.10.128.20 to 10.10.10.58. i can ping between theme when there is no ACL, this is how i validate that traffic is forwarded in the Switch,
I tried to make a second ACL to permit ingress traffic in 128 vlan interface but it still blocked