NETGEAR 7000 Series Managed Switch - Manual (Page 102)

NETGEAR 7000 Series Managed Switch Administration Guide Version 7.2
9-26 Access Control Lists (ACLs)
v1.0, May 2008
Web Interface Procedure
To use the Web interface to isolate VLANs on a Layer 3 switch by using ACLs, proceed as
follows:
1. Create VLAN 24 with IP address 192.168.24.1:
a. From the main menu, select Routing > VLAN > VLAN Routing Wizard. A screen similar
to the following displays.
Create ACL 103 to permit all other traffic.
(Netgear Switch) (Config)#access-list 103 permit ip any any
Deny all traffic with destination IP address 192.168.48.0/24 and permit all
other traffic.
(Netgear Switch) (Config)#interface 1/0/24
(Netgear Switch) (Interface 1/0/24)#ip access-group 102 in 1
(Netgear Switch) (Interface 1/0/24)#ip access-group 103 in 2
(Netgear Switch) (Interface 1/0/24)#exit
Deny all traffic with destination IP address 192.168.24.0/24 and permit all
other traffic.
(Netgear Switch) (Config)#interface 1/0/48
(Netgear Switch) (Interface 1/0/48)#ip access-group 101 in 1
(Netgear Switch) (Interface 1/0/48)#ip access-group 103 in 2
(Netgear Switch) (Interface 1/0/48)#exit
Figure 9-23