Dell N3048P VLAN ACL

Question

Greetings everyone, I'm currently demoing the N3048P switch as a possible replacement for my edge access switches for the school district I work in.  Currently I am running Avaya ERS 5600's which are going end of life shortly and with some funding I have available I'm looking at possible replacements but I'm having issues making a few of the features I use on the Avaya switches work on the N3048P.  So far I've had no issue in getting LLDP working and auto assigning my voice vlan for my ip phones as well as using the built in DHCP server (demo purposes) push out the option 242 I need for my phones to auto provision the call server.  Any way sorry for that long part, now onto my question.  On my Avaya switches it was fairly easy to setup an ACL to prevent others from accessing the management vlan (SSH, HTTPS) of the switch.  I'm having issues in getting this working on the Dell switch though, I believe I built my ACL correctly but as soon as I apply it I literally lose all access to the switch on my management vlan.  If anyone has any examples of how I need to implement this I would be forever grateful.  Below is an example of what I am trying to accomplish.  Just an FYI I am reading through the CLI manual but at a little over 2000 pages it is taking me a little bit of time. VLAN 10 - MGMT VLAN IP Assigned to VLAN 10 - 10.1.240.32/20 I would like for all devices in the 10.1.240.0/20 and the 10.1.16.0/24 range to be able to access the mgmt vlan and all other traffic be dropped.  I know this is probably trivial for most but please keep in mind I have come from an environment that has operated on Nortel/Avaya network gear for almost 15 years.

DELL-Josh Cr · Answer

Hi, How did you configure the ACL? Page 1048 starts the section on management ACLs. ftp://ftp.dell.com/manuals/common/networking_nxxcli_en-us.pdf

cholbrook_jcs · Answer

Thank you so much for pointing me in the right direction, that ended up being a whole lot easier than I thought it would be.  I now have the management access portion of my demo equipment working.  Once again thank you so much.

Networking General

Was this post helpful?