ACL with Source IP and Port to Destination IP and Port between VLANs
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi,
I am trying to limit the access to specific devices and ports from a specific vlan.
VLAN1 (all devices) ---- allow ----- > Port 80 on device A in VLAN2
So what I know from other Firewalls that I config the Policy by selecting:
- Source IP / Subnet
- Source Protocoll
- Source Port
- Destination IP / Subnet
- Destination Protocoll
- Destination Port
I tried to achive it in that way:
I created two IP-Port Groups
First IP-Port Group:
Ports 0-65535
Subnet 10.100.0.0/24
Second IP-Port Group:
Port 80
Subnet 10.200.0.1/32 (10.200.0.0/24 also tested)
and then an ACL by permitting TCP Protocoll from one IP-Port-Group to the other -> does not work.
A tcp network (vlan1) to network (vlan2) acl is working.
Do I misunterstood something?
Thank you
Hi @bsz
Thanks for posting in our business forum.
Since I don't have this switch model, I used a TL-SG2210MP to replicate this issue.
This switch is not capable of creating that many entries, so I tried a different way to emulate what you reported.
Hi @bsz
Thanks for posting in our business forum.
Since I don't have this switch model, I used a TL-SG2210MP to replicate this issue.
This switch is not capable of creating that many entries, so I tried a different way to emulate what you reported.