Allow DHCP and DNS through ACL for vLans

[Trent_Deloach]

I have 4 vlans:
Uplink, Mobile, Portal, NAT

The Nat is the location of my DHCP and DNS server.

I want to create ACL Policies that keep vlans Mobile, Protal, and Nat from talking to each other, but if I do, it breaks Portal and Mobile clients from getting DHCP.

Can I create ACL policies to block all traffic but DHCP and DNS from Portal and Mobile from the NAT vlan.

Sidenote, all need to be allowed through uplink.

Thanks

[Trent_Deloach]

Total
-----------------------------------------------------------------------------------------------
Nat 1 10.80.100.3 /22 -f----------T---------------- ANY 17/33 VR-Default
DIS-Uplink 201 192.168.100.1 /30 -f--------------------------- ANY 1 /1 VR-Default
JCSD-Mobile 20 10.20.100.3 /22 -f--------------------------- ANY 8 /8 VR-Default
Mgmt 4095 ------------------------------------------------- ANY 0 /1 VR-Mgmt
User-Portal 25 10.25.100.3 /22 -f--------------------------- ANY 8 /8 VR-Default
-----------------------------------------------------------------------------------------------