Access Control List

[SirAndre]

Good Afternoon, 

Im having issues Places ACL's. I have a Vlan that i would like to block from communicating with other Vlans. but would like to allow all other Vlans to access the blocked Vlan. where should i create these rules.

Example.

block vlan 5 from seeing other vlans

allow vlan 1 to send and receive to vlan 5

[jdsilva]

---

@SirAndre wrote:

where should i create these rules.

---

What choices do we have? What devices are in your network that can enforce ACLs?

[PhilipDAth]

If you only have MS devices then the rules have to be symmetric.  If VLAN1 is allowed to talk to VLAN5, then VLAN5 has to be allowed to talk to VLAN1.  This is because ACLs in MS switches are stateless.

You would need a firewall to create statefull based ACLs.

[Nick]

Branching this off slightly - if you have MS switches doing the VLAN's and an MX in place as well. I am guessing you'd need to route the VLAN's back to the MX to achieve such results?