Network#20: Control Inter-VLAN routing by ACLs

Network and Cisco packet tracer tutorial.
in this episode we're working on the following topics:
- Control Inter-VLAN traffic by using Access-List (ACLs)
- Please visit our website for more info: www.sasite.net
- Like us on Facebook : / sasitenet

[@adrianfrancis981]

2024 and this is still so relevant, quick and easy explanation, thank you brother!

[@SASiteNet]

Thanks for your nice words! agreed, most of these concepts are the base of networking! I'm working on some IoT and smart home scenarios with packet tracer as well as FortiGate and Palo Alto firewalls labs. What other topics do you like to watch and learn?

[@adrianfrancis981]

@SASiteNet If anything pops up that I struggle with, I'll be sure to let you know. Thank you for your willingness to teach and provide in depth information.

[@MinisterJBB]

1 Millions likes if i could give it! This is what i needed for my network. Very good explanation and demo. Thanks my friend!

[@SASiteNet]

Great it helps!

[@bkyuksel]

finally I found a clear video and a good instructor about VLAN ACLs.. thank you so much for the video

[@tahabasri]

i was searching about controlling traffic between vlans for a whole month, i really thank you

[@markhunt9316]

Thank you! So hard to find any information about applying access lists to VLAN interfaces. This clarified a ton!

[@SASiteNet]

+Mark Hunt welcome Mark, Plz let me know if you looking for any specific networking topic, I try to create tutorial for that. :)

[@SASiteNet]

good to hear the video is helpful, please bear in mind that other technologies like VRF-Lite or EVN are also used in 6500 and 4500 environment to separate the network traffic.

[@hosseinkargar5951]

Thank you for sharing! How can we make it so that VLAN 100 cannot communicate with VLAN 200, but VLAN 200 can communicate with VLAN 100?

[@farzadmehrava43]

Thank you ... exactly what I wanted ... simple informative and practical

[@SASiteNet]

Glad it was helpful!

[@MuhammadRehan-vs2gg]

thanks i was searching about it for 2 weeks ...thanks

[@alercita]

Hi, thank you very much for yours explanations, there are very claires. I could be know: how I can permit the communication des VLAN but in one direction?, for example that VLAN SALES to can communicate with the VLAN IT but VLAN IT can not communicate with VLAN SALES. Thank you very much again, great job!!!

[@loulettesane1327]

Hi, that is the same question I was going to ask. By any chance did you find an answer? Thanks in advance!

[@3DaiYo4Kai56]

how add log to ACL's deny parameters? how Allow ONLY one device in VLAN to access another VLAN?

[@tufuefiso2820]

thank you sir

[@dystopian_1]

Thanks a lot

[@mh63111]

❤🧡💛💚💙💜🤎🤍 Great video - many thanks. 🤍❤🧡💛💚💙💜🤎

[@elmonelamparo8871]

Thankyou for your video so informative

[@neiliwael5536]

Thank you , that's exactly what i was looking for ,

[@SASiteNet]

Great!

[@dm8144]

Thank you for this video, helped me a lot.

[@SASiteNet]

Glad to hear it!

[@SASiteNet]

please feel free to share our channel's link with your friends and colleagues!

[@ataris2548]

Hir sir. May i know if it's possible in intervlan with acl. Let say IT department can ping other dept but the other dept cant ping back the IT department. Thanks

[@pabloalfaro2595]

exactly what i needed to know, thanks!

[@SASiteNet]

Glad to hear it!

[@navindayomalwijesinghe9954]

HelpFull and Thanks a LOT

[@joed960]

you da man

[@nikhilyeotekar2158]

Thanks a lot for this , very helpful to fix my requirement :)

[@quintetrue1]

Hi, Thanks for sharing. I have the doubt why access-group command is applied IN to the interface instead of OUT? I understand that 192.168.200.X is the source and then when going OUT to reach VLAN 50 the ACL applies.

[@SASiteNet]

good question, but keep in mind the IP communications usually happen in two-way. you can control your traffic in a way that suit for your environment and device support.

[@TheEmperorXavier]

this video rocks

[@SASiteNet]

Thanks for your comment

[@shat1478]

helpful , thank

[@aaaalsaleh]

Hello, what about if I want to deny the traffic from Sales Network to servers network and permit the traffic from servers network to Sales network?

[@saiprasadshetty7344]

Hello Ahmed , I am struck with this same question . Was there any luck in finding the answer???

[@ahmadfaridzafari61]

Thanks for nice explanation, Could you please also show that IT Department can access Sales department but Sales Department should not access IT department?

[@SASiteNet]

Please refer to the answer under HQ video: kzbin.info/www/bejne/eXK0lIOverN2gZo&lc=z222sz3wxxrdszl2aacdp434d0vrsduug5r005oym0lw03c010c.1516698419305989

[@irfanullah9179]

Hello, Its great. But I am able to ping even after applying the access-list. I have made access-list with deny ip any any but still I am able to ping the destination.

[@SASiteNet]

Thanks for the comments. Please double check all the configuration, make sure you've applied the ACL on correct interface and follow the tutorial without missing any part. let us know what is the result.

[@prasanthcreations241]

Can we block one side traffic in between two vlan

[@SASiteNet]

always remember, in a network environment, you need a reply from the other side!

[@virgoema]

Hello thanks for sharing knowledge you have whatapp I have an acl query

[@CheekyCake]