I am having issues with a Cisco 1921 when it comes to access lists and vlans.
I have my vlan configured and interface with IP as well as the access group assigned to the vlan interface.
encapsulation dot1Q 600
ip address 10.10.6.1 255.255.255.0
ip access-group VLAN600 out
ip helper-address 192.168.160.3
ip nat inside
ip virtual-reassembly in
ip access-list extended VLAN600
deny ip 10.10.6.0 0.0.0.255 192.168.160.0 0.0.0.255
permit ip 10.10.6.0 0.0.0.255 any
I can't access the 192.168.160.x network from the 10.10.6.x network, which is good, but I can see the 10.10.6.1 gateway IP and ping it etc from the 192.168.160.x.subnet. How do I ensure that is blocked as well and not seen?
Also, how would I go about allowing certain machines on the vlan 1 (192.168.160.x subnet) access to a certain machine on the vlan600 (10.10.6.x subnet) by mac address?
I have tried "access-list 700 permit 0000.0000.0000 FFFF.FFFF.FFFF" without success, obviously with the correct MAC addresses.
If anyone has some insight, that would be great. Thanks.