09-20-2022 03:10 AM
Hello,
I have two network Core VSP4900 with VRRP Active Backup Enable.
I want to activate ACL on differents Vlan.
For example, I Want to permit Vlan 4 to Vlan 3 and deny Vlan 3 to Vlan 4. It's uni-directionnal?
I Activate the ACL below in vlan 3, Vlan 3 is block toward Vlan 4 but VLan 4 cannot communicate with Vlan 3 either. I don't understand because I don't activate ACL in vlan 4.
filter acl 3 type inVlan name "VLAN3"
filter acl vlan 3 3
filter acl ace 3 1 name "VLAN3toVLAN4-DENY"
filter acl ace action 3 1 deny
filter acl ace ethernet 3 1 ether-type eq ip
filter acl ace ip 3 1 dst-ip mask 10.71.4.0 0.0.1.255
filter acl ace 3 1 enable
Anyone have an idea ?
Thanks,
Best Regards,