Understanding VLAN ACL

LAN ACLs (VACLs) can provide access control for all packets that are bridged within a VLAN or that are routed into or out of a VLAN for VACL capture. Unlike Cisco IOS ACLs that are applied on routed packets only, VACLs apply to all packets and can be applied to any VLAN. VACLs are processed in the ACL TCAM hardware. VACLs ignore any Cisco IOS ACL fields that are not supported in hardware.
You can configure VACLs for IP and MAC-layer traffic.
If a VACL is configured for a packet type, and a packet of that type does not match the VACL, the default action is to deny the packet.
Packets can either enter the VLAN through a Layer 2 port or through a Layer 3 port after being routed. You can also use VACLs to filter traffic between devices in the same VLAN.

[@loueybencheikh6156]

very good simple explanation, great work i follow !

[@awarkhan1093]

U can enable inter vlan routing. And make sub interfaces in router

[@pprasanta18]

i have 6 vlan in a switch i want every vlan communicate with vlan 6 but any vlan cannot communicate to any other vlan
how to configure please help me

[@shubhamawasthi7598]

Allow only vlan 6 and deny all others in every access group.

[@DeepakKumar-kr3co]

Use Private VLAN

[@igorlifanov8333]

what it was? -> wasted my time