Ruijie Community

Title: EG3230 ACL to Block inter-vlan routing [Print this page]

Author: Mario Time: 2022-4-9 00:01
Title: EG3230 ACL to Block inter-vlan routing
I created the DHCP, Sub-Interfaces on Te0/0

Then created the ACLs, 100,101,102 for each Vlan to block each other

Then applied the Interface Access Control to Te0/0

I am still able to ping between several of the Vlans. Is there something I am missing?

Author: GTAC-Patrick Time: 2022-7-27 11:53
Edited by Patrick at 2022-7-27 23:53

Dear sir,

Sorry for the late replying.
After viewing your description and configuration, I found that you set the wrong wildcard-mask of ACL. The wildcard-mask should be 0.0.0.127 according to the submask 255.255.255.128, and 0.0.0.63 for 255.255.255.192 in the same way.

And It's recommended that using the inbound for the Extended ACL filter direction.

Best regards,
Patrick

Author: masmith22@veriz Time: 2022-7-28 06:35

Patrick replied at 2022-7-27 11:53
Dear sir,

Sorry for the late replying.

Thank you, will give this a try.

Author: ict_infra@iccs. Time: 2024-6-11 00:16

Mario replied at 2022-7-28 06:35
Thank you, will give this a try.

Hi, I have a similar scenario where ACLs are working as expected, blocking inter-VLAN routing to all sub-interface LANs. However, this time, I need to allow some devices on VLAN 10 (10.1.1.10) to communicate with VLAN 20 (20.1.1.10). For example, I have a service on VLAN 10 that needs to be accessed from VLAN 20.
I have set up ACLs on both VLAN interfaces to permit traffic between these VLANs, but it doesn't seem to be working. Both VLANs are unable to communicate, although they can ping the gateway of each VLAN.
I have attached an image for reference. Can you check and suggest what I might be missing?

Welcome to Ruijie Community (https://community.ruijienetworks.com/)