I am having issues with a Cisco 1921 when it comes to access lists and vlans.
I have my vlan configured and interface with IP as well as the access group assigned to the vlan interface.
interface GigabitEthernet0/1.600 description Systems encapsulation dot1Q 600 ip address 10.10.6.1 255.255.255.0 ip access-group VLAN600 out ip helper-address 192.168.160.3 ip nat inside ip virtual-reassembly in ! ip access-list extended VLAN600 deny ip 10.10.6.0 0.0.0.255 192.168.160.0 0.0.0.255 permit ip 10.10.6.0 0.0.0.255 any
I can't access the 192.168.160.x network from the 10.10.6.x network, which is good, but I can see the 10.10.6.1 gateway IP and ping it etc from the 192.168.160.x.subnet. How do I ensure that is blocked as well and not seen?
Also, how would I go about allowing certain machines on the vlan 1 (192.168.160.x subnet) access to a certain machine on the vlan600 (10.10.6.x subnet) by mac address?
I have tried "access-list 700 permit 0000.0000.0000 FFFF.FFFF.FFFF" without success, obviously with the correct MAC addresses.
If anyone has some insight, that would be great. Thanks.