With switch firmware before version 6 I don’t think you were able to specify certain TCP flags in the ACEs. You could specify the protocol though. With the latest firmware on the 8100 switches you can specify. The latest firmware is 6.0.1.3. www.dell.com/.../drivers Once this is installed you should be able to specify that  permit tcp 10.0.0.0 0.0.0.255 192.168.0.0 0.0.0.255 +ack deny tcp 10.0.0.0 0.0.0.255 192.168.0.0 0.0.0.255 +syn permit ip any any Page 612 starts explaining the ACL options in the new firmware. ftp.dell.com/.../powerconnect-8100_Concept%20Guide2_en-us.pdf Let me know if that works or not. Thanks
I have a PC8132F switch configured with two VLANs; IP routing is enabled on the switch and devices on each VLAN communicate with each other as expected. I would like to apply IP ACLs so that VLAN 10 cannot access VLAN 20, but VLAN 20 can access VLAN 10. I've applied an ACL to the switch using the following commands: access-list vl10 deny ip 10.0.0.0 0.0.0.255 192.168.0.0 0.0.0.255access-list vl10 permit ip any anyinterface vlan 10ip access-group vl10 After applying, VLAN 10 is blocked from accessing VLAN 20 as intended, but VLAN 20 also loses access to VLAN 10 because the reply traffic from VLAN 10 is being blocked on return. I've looked over the CLI Reference Guide, but can't see anything about ACLs supporting stateful/established connections to support reply traffic. Can it be done, and if so, how would I go about achieving it? Thanks
Applying ACLs to an 8132 switch