VLAN ACCESS LIST DHCP problem

[ETBOY]

Hi,,

I have four vlan's configured in Cat4500,and i'm doing ip routing in Cat4500. I have an W2k DHCP server (10.1.0.90), with 4 scopes.My problem is that i don't want that host's in other vlan access hosts in vlan 2.But when i do this i can't acquire an ip form DHCP server . Above i show what i have configured for vlan 3 for example besides that access list i can't acquire an ip.Could someone help me, please.

Interface vlan1
10.0.0.254 255.255.0.0
ip helper-address 10.1.0.90
Interface vlan2
10.1.0.254 255.255.0.0
Interface vlan3
10.2.0.254 255.255.0.0
ip helper-address 10.1.0.90
Interface vlan4
10.3.0.254 255.255.0.0
ip helper-address 10.1.0.90


ip access-list extended trafficok
permit ip 10.2.0.0 0.0.255.255 10.1.0.0 0.0.255.255
permit ip 10.1.0.0 0.0.255.255 10.2.0.0 0.0.255.255

ip access-list extended othertraffic
permit ip any any

vlan access-map test
match ip address trafficok
action forward
vlan access-map test 20
match ip address othertraffic
action drop

vlan filter test vlan-list 3

Regards
Mc

 

[Parcival21]

Hi there
Maybe try the following:
put an access list on your access switches for vlan 2:
ip access-list 101 deny ip any 10.1.0.0 0.0.255.255
on the interface implement the access list for incoming traffic...
bye,
busche