Switch ACL

satishtech

Are Switch ACL's part of 100-105 ?

I assigned an ACL to a switch vlan 1 interface,it blocked ping to that
vlan IP but allowed Ping's throw to the Router, in effect the ACL did not
filter packets passing throw, why is this ?

clarson

what was the command(s) you used to assign the acl?

satishtech

ip access-group jedi in

applied at int vlan 1

MAC_Addy

Can you post more detail, please. IE, the running config on the switch.

satishtech

Router

---

switch

---

PC's getting IP's via DHCP on another subnet
192.168.1.1


switch:
sh ru

ip routing

interface Vlan1
ip address 192.168.1.100 255.255.255.0
ip access-group jedi in
!
ip classless
!
ip flow-export version 9
!
!
ip access-list extended jedi
deny ip 192.168.1.0 0.0.0.255 any
permit ip any any
!

cannot ping .100 on switch but can ping .1 on router interface