Cisco 3550 and ACL on VLAN

Hello!

I have on Cisco 3550-24-EMI with 3 VLANs on IT.

VLAN1 default 172.16.0.100/23
VLAN2: 172.16.2.254/24
VLAN4: 172.16.4.254/24

I would like to set an ACL on each vlans (incoming) to filter traffico from hosts within the VLAN, going out to others vlan
for example from an host in the vlan4 172.16.4.10/24 going to 0.0.0.0 (any).

This is an example of the ACL.


access-list 181 deny udp 172.16.0.0 0.0.255.255 any eq tftp
access-list 181 deny tcp 172.16.0.0 0.0.255.255 any eq 135
access-list 181 deny udp 172.16.0.0 0.0.255.255 any eq 135
access-list 181 deny tcp 172.16.0.0 0.0.255.255 any range 137 139
access-list 181 deny udp 172.16.0.0 0.0.255.255 any range netbios-ns
netbios-ss
access-list 181 deny tcp 172.16.0.0 0.0.255.255 any eq 445
access-list 181 deny udp 172.16.0.0 0.0.255.255 any eq 445
access-list 181 deny tcp 172.16.0.0 0.0.255.255 any eq 593
access-list 181 deny udp 172.16.0.0 0.0.255.255 any eq 593
access-list 181 deny tcp 172.16.0.0 0.0.255.255 any eq 4444
access-list 181 permit ip 172.16.0.0 0.0.255.255 any
access-list 181 permit ip 10.0.0.0 0.0.0.15 any
access-list 181 deny ip any any log


I would like to filter some traffic using the horsepower of the switch, instead than leaving it going to our core router to be filtered before exiting our network.

Problems:

If I apply the ACL 181 in the vlan4 (ip access-group 181 in) it doesnt match


Can someone point me in the right direction?

thank you

.

Relevant Pages

  • Security Internal Network using VLAN
    ... Individual VLANS will segregate the traffic but might not ... bring much in the way of real security. ... The thing to remember about the ACL is ... applied over Layer3 Switch? ...
    (Security-Basics)
  • acl to separate VLANs 3550
    ... I want to separate different VLANs on the 3550 enabled for routing. ... If I apply below acl inbound to the SVI of VLAN20 ... remark Access from the switch' L3 SVI, ...
    (comp.dcom.sys.cisco)
  • Re: IPFW/Dummynet/Bridging with VLAN trunks?
    ... that runs across multiple VLANs. ... Ideally, I'd like to use the dot1q tag in ipfw rules directly, and avoid ... I don't think ipfw can filter on dot1q tags yet, ...
    (freebsd-questions)
  • Re: Confused by VLAN...
    ... Insted of setting up a bunch of VLANS for only 4 devices, ... an ACL table restricting the IP's of those devices OR you could setup ... the VLANS and just segregate the Subnets you want through your ACL. ... Either way I think your going to have to write an ACL for your setup. ...
    (comp.dcom.lans.ethernet)
  • Re: Access List questions for ACL GURUs and Switch question
    ... Bob is correct, doesn't matter what VLANs are included the ACL has the ...
    (comp.dcom.sys.cisco)