Aruba S2500, vlan and ACL

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

sashk

New Member
Mar 31, 2019
4
0
1
Hi. I've got Aruba S2500-48P switch and currently in process of setting it up.
I've read couple of manuals, as well as cisco vs aruba manual available from HP and got extremely confused.

I would like to block any communications between two VLANs on the switch and came up with the following:

Code:
ip access-list extended vlan_6_in
 deny any 192.168.5.0 0.0.0.255 192.168.6.0 0.0.0.255
 permit any any any
!
vlan 6
!
interface vlan 6
 ip access-group in vlan_6_in
 ip address 192.168.6.253 255.255.255.0
!
This seems to be accepted, but cisco vs aruba manual suggests that ip access-group in vlan_6_in should go into vlan 6 section, not interface vlan 6 section. Am I doing this correct way and misunderstand the manual?

Thanks.