HI,
my target is to allow only a few vlans from a vman to exit a specific port.
example port 1, 2 and 3 at untagged in vman 2000.
all traffic from 1 should be forwarded to 2 and vice versa. only vlan 100 and 102 should be forwarded to port 3.. I do not know the vlans inserted into port 1 and 2 except 100 and 102 therefore the vman untagged idea.
to start I tried a deny all rule on port 3
docu say egress rule:
denyAll.pol
entry DenyAllEgress{
if {
source-address 0.0.0.0/0;
} then {
deny;
}
}but after
configure access-list denyAll ports 3 egress
still all traffic is visible at port 3 and also on the next switch...
Whats the fault and whats the solution ?
