On Cisco devices I'm looking to enable some filtering for one specific vlan (id 110).
Here is my config : (126.96.36.199 is the DHCP server host)
ip access-list extended VLAN110-DHCP permit ip any host 188.8.131.52 permit ip host 184.108.40.206 any permit ip any host 220.127.116.11 permit ip host 18.104.22.168 any ip access-list extended VLAN110-RFC permit ip any 192.168.0.0 0.0.255.255 permit ip 192.168.0.0 0.0.255.255 any permit ip any 172.16.0.0 0.15.255.255 permit ip 172.16.0.0 0.15.255.255 any permit ip any 10.0.0.0 0.255.255.255 permit ip 10.0.0.0 0.255.255.255 any vlan access-map VMAP-VLAN110 5 match ip address VLAN110-DHCP action forward vlan access-map VMAP-VLAN110 10 match ip address VLAN110-RFC action drop vlan access-map VMAP-VLAN110 20 action forward
vlan filter VMAP-VLAN110 vlan-list 110
Yet when I get a device in VLAN110 I have no connectivity at all... I want to have connectivity only to DHCP server and public IPs. I want to filter private IPs. Is there anything missing to my configuration ?