You are on page 1of 1

Create an ACL to block 10.10.70.

0/24 to vlan30,40,50 and allow only internet access

access-list 101 deny ip 10.10.70.0 0.0.0.255 10.10.30.0 0.0.0.255


access-list 101 deny ip 10.10.70.0 0.0.0.255 10.10.40.0 0.0.0.255
access-list 101 deny ip 10.10.70.0 0.0.0.255 10.10.50.0 0.0.0.255
access-list 101 permit ip 10.10.70.0 0.0.0.255 any

interface Vlan30
ip access-group 101 in

interface Vlan40
ip access-group 101 in

interface Vlan50
ip access-group 101 in

You might also like