On Wed, Oct 14, 2009 at 9:25 AM, Cynthia Wahome <cwahome@jambo.co.ke> wrote:
Hi All,
I have 5 VLANs in my network configured in my L3 switch 4500. currently
all VLANs can ping and reach each others,  means 192.168.3.100 host in my
vlan2 can reach 192.168.1.100 which is vlan3. I want to create an ACL in
my L3 switch to deny the Vlans to access or ping each other, I just want
them to access my servers 172.16.1.10 - 172.16.1.30 which are in the
default Vlan1. can someone advise me which the commands and where to apply
them in the L3 switch.

Thanks
 
Hey Cynthia, I've no experience on Cisco layer3 but worked on Dlink layer 3. However, pls go to the link below, Cisco has provided all the info about configuring Private VLANs and also enable routing. It has alos given the commands for the ports, which will help. HTHs.
 
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.1/19ew/configuration/guide/pvlans.html
 
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.1/19ew/configuration/guide/l3_int.html#wp1029700