I have a Cisco 891F router. The internet is hooked up to G8. The student network is Vlan 200, and the Office is Vlan 100.
(I know the internet has an internal subnet (192.168.1.5), but that's because I'm testing in the lab.)
So the situation is that I have the internet on G8, and a classroom on vlan 200, with the office staff on vlan 100. I'm using NAT, actually, PAT, for each internal network and all is working well for internet access from both internal networks.
However, I need to add an ACL so that the 192.168.200.0/24 student network (vlan 200) can not see anything in the 192.168.151.0/24 office network (vlan 100).
I have not been able to find or work through anything with the "deny" along with the NAT that has the limited access described above.
Here is the interface and acl config: (any help is appreciated) -T
interface GigabitEthernet0 switchport access vlan 100 no ip address ! interface GigabitEthernet1 switchport access vlan 200 no ip address ! interface GigabitEthernet2 no ip address ! interface GigabitEthernet3 no ip address ! interface GigabitEthernet4 no ip address ! interface GigabitEthernet5 no ip address ! interface GigabitEthernet6 no ip address ! interface GigabitEthernet7 no ip address ! interface GigabitEthernet8 description To Internet ip address 192.168.1.5 255.255.255.0 ip nat outside ip virtual-reassembly in duplex auto speed auto ! interface Vlan1 no ip address ! interface Vlan100 description Office Network ip address 192.168.151.1 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Vlan200 description Student Network ip address 192.168.200.1 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Async3 no ip address encapsulation slip ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ip nat inside source list 10 interface GigabitEthernet8 overload ip nat inside source list 20 interface GigabitEthernet8 overload ip route 0.0.0.0 0.0.0.0 192.168.1.1 ! ! access-list 10 permit 192.168.151.0 0.0.0.255 access-list 20 permit 192.168.200.0 0.0.0.255 !