Cisco notes


VLAN access list

PRINTERS is a VLAN. This will allow access to port 80, 161, 631, 9100 to only 192.168.0.0/23. Deny everything else.

ip access-list extended PRINTERS
    permit tcp 192.168.0.0 0.0.1.255 any eq 631
    permit tcp 192.168.0.0 0.0.1.255 any eq 9100
    permit tcp 192.168.0.0 0.0.1.255 any eq 80
    permit tcp 192.168.0.0 0.0.1.255 any eq 161
    permit udp 192.168.0.0 0.0.1.255 any eq 161
    permit icmp any any
    deny   tcp any any log
    deny   udp any any log


Author: Vladimir Vuksan E-mail me