I am sorry.
A small correction in access list .
 
interface Vlan2
 ip address 10.10.2.1
 ip access-group 111 in
 ip helper-address 10.10.1.10 
 
 
----- Original Message -----
From: Saju Nair
Sent: Tuesday, August 22, 2000 7:40 PM
Subject: DHCP over vlan

Hi,
 
I have two valn i.e  10.10.1.0 (vlan1)  ,10.10.2.0 (vlan2) on cisco 5505 Catalyst Switch.
I want to point all machines in valn2 to DHCP server which is there in vlan1.And also i have
an access-list on vlan2 which permits only smtp and pop3  from vlan2 to vlan1.
Can any one help me to achieve DHCP over vlan ? Without access-list I am able to
achieve DHCP over vlan , but with access-list I am not. See the more info about network below.
 
Thanks and regards,
Saju
 
 
 
interface Vlan1
 ip address 10.10.1.1
 
interface Vlan2
 ip address 10.10.2.1
 ip access-group 111 in
 ip helper-address 10.10.1.10 
 
ip forward-protocol udp 67
ip forward-protocol udp 68
access-list 111 permit tcp any any established
access-list 111 permit tcp any any eq www
access-list 111 permit tcp any any eq 8080
access-list 111 permit tcp any host 10.10.1.18 eq domain
access-list 111 permit udp any host 10.10.1.18 eq domain
access-list 111 permit tcp any host 10.10.1.18 eq pop3
access-list 111 permit tcp any host 10.10.1.18 eq smtp
access-list 111 permit tcp any host 10.10.1.18 eq 143
access-list 111 permit tcp any host 10.10.1.18 eq 389
 
below line added for DHCP testing , I don't know its required ?
 
access-list 111 permit udp any host 10.10.1.10 eq bootps
access-list 111 permit udp any host 10.10.1.10 eq bootpc
 
 
note :
10.10.1.10  is DHCP server
10.10.1.18  is mail server
 
 
 
 

Reply via email to