AdvancedPublished 2026-10-02
CCNA L3 Switching: Filters on the VLAN Gateways
Today's daily lab
Lab 5 of 5 in CCNA Layer 3 Switching: Route on the Switch · ← Previous
CCNA exam domain: Security Fundamentals
Finance must be walled off from general users. Write two filters and put each where its VLAN's traffic enters the switch.
Learning objectives
- Filter traffic between VLANs on a multilayer switch
- Place each extended ACL where its traffic enters the switch
- Verify allowed and blocked flows from both hosts
Troubleshooting focus
- Everything is blocked: check the filter still permits DHCP and the services address
- Nothing is blocked: check the direction, the interface and the entry order
Topology
Subscribe to preview this lab's topology.
See plansGrade your work
How this lab is graded
- Build it your way. Where a lab lets you choose a value — a VLAN name, an interface description — grading checks that you configured it, not which name you picked. Names that another line has to reference, like an ACL applied with
access-class, are stated in the guide and do have to match. - Addresses, modes and protocol keywords are exact. An IP address, a subnet mask,
switchport mode trunk, an encapsulation — these carry the meaning of the lab, so they are graded as written in the guide. - Grading reads your saved configuration. Export the lab from CML after you have configured it, and make sure anything you set is in the
running-config— a change that only exists in a terminal session never reaches the grader. - You can submit as many times as you like. Your best score stands, and each attempt tells you which checks passed so you can work the gaps.
- Scored something you believe is correct? Use Report an issue on this page — that is exactly how the grading fixes in the changelog got found.
Create a free account to submit your lab for grading.
Create a free accountFound a problem with this lab?
Please sign in to report a problem — tying it to your attempts lets us reproduce and fix it faster.