Wired Intelligent Edge

 View Only
last person joined: yesterday 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

5406 accecss list

This thread has been viewed 0 times

  • 1.  5406 accecss list

    Posted Apr 19, 2013 08:33 AM

    Hi

     

    I have a Student VLAN and an IT Services VLAN

     

    I wish to be able to TCP from IT to student, but do not wish to be able to TCP from Student to IT Services

     

    I have tried using

     

    access-list 101 permit source destination established

     

    but this allows tcp in both directions, unless I have the syntax wrong or have missed something.

     

    do I need to add things like gt 1023 or ACK,RST

     

    regards

     

     

     


    #VLAN


  • 2.  RE: 5406 accecss list

    Posted Apr 20, 2013 08:52 AM

    Hi Is your situation can be solved by protected port configuration?

    http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02563912/c02563912.pdf

     



  • 3.  RE: 5406 accecss list

    Posted Apr 22, 2013 03:55 AM

    looking at the link provided, protected ports looks like the ports will be protected from each other.

     

    What i need is for the IT Services Vlan to still be able to access the student VLan but the student vlan to be blocked. Also this mentions port based my access list is on the VLAN itself(student vlan).

     

    I think the tcp established route might be the solution if I can only sort out the syntax


    #security
    #access
    #tcp
    #VLAN
    #established
    #list