Hey all, I have set up a 48 port layer 3 switch. Each port has its own ip address. they start from 192.168.1.1 up to 192.168.42.1 and then there are a few others for admin purposes. Port 48 however is attached to a firewall, this port has an ip 192.168.100.1 and the firewall is .254 Now as long as i configure my DNS I get internet access through the firewall, however I need to stop all the ports from talking to each other (apart from each port and port 48 for the firewall) so ive tried setting up access control lists to only permit traffic from a port to port 48. This works fine and there is only traffic through these 2 ports, and i can ping the firewall and nothing else. However outside internet access isnt working, is this because its dropping packets from external ips? Im going to try to permit traffic from 192.168.0.0 also and see if this helps (the switchs ip is 192.168.0.254) Any help is appreciated.

You could have used Private VLANs or PVLANs, if these are Cisco switches. Thanks.

Yeh i've tried using VLANS with this, its a netgear layer 3 switch. However if i use vlans i cannot assign the ports an ip address and Im having problems with routing, its been a real pain in the arse!