Hi,

Thanks for your advice, I've read all of the articles above.

Before posting the configuration, I would like to theretically clear out how ACL work.

If I set an inbound IP ACL based on a vlan and I have two or more clients in that network - will they communicate with each other ignoring the ACL? I suggested, they will apply, when a packet ENTERS the network, but the clients are already INSIDE this network. So the switch would.. well he would switch and not route?

At the moment, i have set an ACL that only permits ICMP. I could ping the clients, but nothing more. Is this the correct behaviour?