How to make a route between two routers (networks) connected to the same switch?

Similar Questions

• Routing between two remote sites connected over the VPN site to site

  I have a problem ping between remote sites.  Now the Cryptography and no nat ACL's for different sites just to affect traffic between the remote site and main site. I tried to add roads, adding other subnets to the crypto and no. ACL Nat at the remote sites... nothing worked.  Any ideas?

  Main site:

  192.168.100.0 - call manager / phone VLAN

  192.168.1.0/24 - data VLAN

  Site 1:

  192.168.70.0/24 - phone VLAN

  192.168.4.0/24 - data VLAN

  Site 2:

  192.168.80.0/24 - phone VLAN

  192.168.3.0/24 - data VLAN

  Main router

  Expand the IP ACL5 access list
  10 permit ip 192.168.1.0 0.0.0.255 192.168.70.0 0.0.0.255
  20 ip 192.168.1.0 allow 0.0.0.255 192.168.4.0 0.0.0.255
  30 permits ip 192.168.100.0 0.0.0.255 192.168.4.0 0.0.0.255
  IP 192.168.100.0 allow 40 0.0.0.255 192.168.70.0 0.0.0.255)
  50 permit ip 10.255.255.0 0.0.0.255 192.168.70.0 0.0.0.255
  Expand the IP ACL6 access list
  10 permit ip 192.168.1.0 0.0.0.255 192.168.80.0 0.0.0.255
  20 ip 192.168.1.0 allow 0.0.0.255 192.168.3.0 0.0.0.255
  30 permits ip 192.168.100.0 0.0.0.255 192.168.3.0 0.0.0.255
  IP 192.168.100.0 allow 40 0.0.0.255 192.168.80.0 0.0.0.255

  Expand the No. - NAT IP access list
  10 deny ip 192.168.2.0 0.0.0.255 192.168.70.0 0.0.0.255
  20 deny ip 192.168.200.0 0.0.0.255 192.168.4.0 0.0.0.255
  30 deny ip 192.168.2.0 0.0.0.255 192.168.80.0 0.0.0.255
  40 deny ip 192.168.200.0 0.0.0.255 192.168.3.0 0.0.0.255
  320 ip 192.168.1.0 allow 0.0.0.255 any
  IP 192.168.100.0 allow 330 0.0.0.255 any

  Site 1:

  ACL5 extended IP access list

  IP 192.168.70.0 allow 0.0.0.255 192.168.1.0 0.0.0.255

  ip licensing 192.168.4.0 0.0.0.255 192.168.100.0 0.0.0.255

  IP 192.168.70.0 allow 0.0.0.255 192.168.100.0 0.0.0.255

  ip licensing 192.168.4.0 0.0.0.255 192.168.1.0 0.0.0.255

  IP 192.168.70.0 allow 0.0.0.255 10.255.255.0 0.0.0.255

  No. - NAT extended IP access list

  deny ip 192.168.70.0 0.0.0.255 192.168.1.0 0.0.0.255

  refuse the 192.168.4.0 ip 0.0.0.255 192.168.100.0 0.0.0.255

  deny ip 192.168.70.0 0.0.0.255 192.168.100.0 0.0.0.255

  refuse the 192.168.4.0 ip 0.0.0.255 192.168.1.0 0.0.0.255

  deny ip 192.168.70.0 0.0.0.255 10.255.255.0 0.0.0.255

  IP 192.168.70.0 allow 0.0.0.255 any

  ip licensing 192.168.4.0 0.0.0.255 any

  Site 2:

  ACL6 extended IP access list
  IP 192.168.80.0 allow 0.0.0.255 192.168.1.0 0.0.0.255
  ip licensing 192.168.3.0 0.0.0.255 192.168.100.0 0.0.0.255
  IP 192.168.80.0 allow 0.0.0.255 192.168.100.0 0.0.0.255
  ip licensing 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
  IP 192.168.80.0 allow 0.0.0.255 10.255.255.0 0.0.0.255
  No. - NAT extended IP access list
  deny ip 192.168.80.0 0.0.0.255 192.168.1.0 0.0.0.255
  deny ip 192.168.3.0 0.0.0.255 192.168.100.0 0.0.0.255
  deny ip 192.168.80.0 0.0.0.255 192.168.100.0 0.0.0.255
  deny ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
  deny ip 192.168.80.0 0.0.0.255 10.255.255.0 0.0.0.255
  IP 192.168.80.0 allow 0.0.0.255 any
  ip licensing 192.168.3.0 0.0.0.255 any

  What should I do for these two sites can ping each other?  I looked through the forums but can't seem to find someone with a similar problem, which has received a definitive answer.

  Thanks in advance!

  Hi, I assume that you need site 1 and 2 to communicate with each other via the main site right? If this is the case, then you need to set add the following lines to your ACL crypto:

  Main router

  Expand the IP ACL5 access list

  IP 192.168.80.0 allow 0.0.0.255 192.168.70.0 0.0.0.255

  IP 192.168.80.0 allow 0.0.0.255 192.168.4.0 0.0.0.255

  ip licensing 192.168.3.0 0.0.0.255 192.168.70.0 0.0.0.255

  ip licensing 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255

  Expand the IP ACL6 access list

  IP 192.168.70.0 allow 0.0.0.255 192.168.80.0 0.0.0.255

  IP 192.168.70.0 allow 0.0.0.255 192.168.3.0 0.0.0.255

  ip licensing 192.168.4.0 0.0.0.255 192.168.3.0 0.0.0.255

  ip licensing 192.168.4.0 0.0.0.255 192.168.80.0 0.0.0.255

  Make sure you add these lines before the last permit

  Expand the No. - NAT IP access list

  deny ip 192.168.80.0 0.0.0.255 192.168.70.0 0.0.0.255

  deny ip 192.168.80.0 0.0.0.255 192.168.4.0 0.0.0.255

  deny ip 192.168.3.0 0.0.0.255 192.168.70.0 0.0.0.255

  deny ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255

  deny ip 192.168.70.0 0.0.0.255 192.168.80.0 0.0.0.255

  refuse the 192.168.4.0 ip 0.0.0.255 192.168.80.0 0.0.0.255

  deny ip 192.168.70.0 0.0.0.255 192.168.3.0 0.0.0.255

  refuse the 192.168.4.0 ip 0.0.0.255 192.168.3.0 0.0.0.255

  Site 1:

  ACL5 extended IP access list

  IP 192.168.70.0 allow 0.0.0.255 192.168.80.0 0.0.0.255

  ip licensing 192.168.4.0 0.0.0.255 192.168.80.0 0.0.0.255

  IP 192.168.70.0 allow 0.0.0.255 192.168.3.0 0.0.0.255

  ip licensing 192.168.4.0 0.0.0.255 192.168.3.0 0.0.0.255

  Make sure that these lines are added before the last permit

  No. - NAT extended IP access list

  deny ip 192.168.70.0 0.0.0.255 192.168.80.0 0.0.0.255

  refuse the 192.168.4.0 ip 0.0.0.255 192.168.80.0 0.0.0.255

  deny ip 192.168.70.0 0.0.0.255 192.168.3.0 0.0.0.255

  refuse the 192.168.4.0 ip 0.0.0.255 192.168.3.0 0.0.0.255

  Site 2:

  ACL6 extended IP access list

  IP 192.168.80.0 allow 0.0.0.255 192.168.70.0 0.0.0.255

  ip licensing 192.168.3.0 0.0.0.255 192.168.70.0 0.0.0.255

  IP 192.168.80.0 allow 0.0.0.255 192.168.4.0 0.0.0.255

  ip licensing 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255

  So make sure that these lines are added before the last permit

  No. - NAT extended IP access list

  deny ip 192.168.80.0 0.0.0.255 192.168.70.0 0.0.0.255

  deny ip 192.168.3.0 0.0.0.255 192.168.70.0 0.0.0.255

  deny ip 192.168.80.0 0.0.0.255 192.168.4.0 0.0.0.255

  deny ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255

  So you're saying good enough your routers with these definitions which will be reached via one main remote sites (sites 1 and 2).

  I would like to know if this is what you need.

• Multimedia file sharing only works if the two devices are connected using the same protocol

  So I'm frustrated!

  I spent an hour trying to get my Windows 7 computer to share my music with my XBox 360. I have two machines on my network, one connected by Ethernet to the router and the other connected by WiFi. I tried everything I could find online to get the WiFi connected machine appears in the "Music Player" on my XBox system - follow all sharing, make sure that my router has UPnP, restarted a bouquet of services, etc..
  Nothing! During this time, my machine connected to Ethernet was watching me in the face. He has appeared on the XBox without problem. I started to compare the settings on both machines and found no difference.
  Then I remembered, boredom, I had setting up WiFi sync for Windows Phone my wife. In fact, it was this session of troubleshooting that lead me to put this machine on the WiFi in the first place! Seems to set up WiFi sync, Windows Phone and the target of the machine must be, not only connected to the same network (obviously), but for some reason any the $ @$ crazy, both connected by WiFi. I just connected this computer by WiFi - not happy, a faster speed with my wired connection - and immediately fixed the problem itself.
  Then, remembering that, I moved my XBox WiFi network and - presto - my second machine appears without a problem.
  My question is... WTF! ???
  This is ridiculous - this is the same network! Why things must be connected using the same protocol?

  Hi, Edward Petersen,.

  Please contact the Microsoft community. I'll help you solve the problem with sharing music using media sharing.

  Some routers isolate the cable connections and wireless, you can check if you have the option in the configuration of the router to share media

  If the problem occurs, you can contact the router manufacturer for assistance.

  Hope this information helps. If you need help with Windows, simply reply that we will be happy

  to help you.

• Desktop sharing, allow two users to connect on the same desktop

  Does anyone know if view Horizon be configured in such a way that:

  -Two (or more) users can connect on the same desktop

  -vSGA can still be used

  The reason why I ask, is that in my area there is a request for collaboration in which two people on different locations want to go through a 3D medical treatment plan and discuss on the phone. Documentation of the Horizon does not say that it can, but it does not say that he can't.

  There is nothing on the Horizon that would in native mode.  You must use a product type to have two people viewing the same third party screen sharing office.

• Number of weeks between two dates that are in the same or different year

  Hello

  How to calculate the number of weeks between two dates?

  for example. "" "17-mar-2013' and June 27, 2013" or June 15, 2013 "and" 25-mar-2014
  

  
  

  Thanks in advance.

  lukx
  

  Hello

  Looks like your date range is incorrect.

  Please try the below.

  SQL >-front right

  SQL > select D2 - D1 "days."

  2 round ((D2-D1)/7.0) "weeks."

  3 round (Months_between (d1, d2), 0) 'months '.

  (select 4

  5 TO_DATE ('20121201', 'YYYYMMDD') D1, D2 TO_DATE ('20130116', 'YYYYMMDD')

  6 from two

  (7) date_range;

  Elapsed days weeks months

  ------------ --------- ---------

  46         7         1

• newBie Q: how to make a clickable form to access a slide with the same name of the form (button c_1 drag c_1 f.e.).

  I've done a few clickable placeholders on a masterslide

  Then: a new slide based on this masterslide

  and to use a script or shared action that says "(le saut de succès à une autre diapositive avec nom samen te que le bouton...)"

  Sorry for this unusual semantic language.

  But already thank you for answering!

  Lucas

  PS I use a trial version to test a branched interactive scenario. A choice of a user driven tot another slide with a followed video reaction of other choices,...)

  Not possible to use a variable in this case to link the label name for a name for the slide.  But I still don't see the purpose at all?

  Will you need to the same button with the same name on multiple slides? Will you use for the rest of the project timing in this case? Because you cannot reuse a name of a button, if you have two instances of this button on two different slides, they will need each a different name. If this is the same form button, programmed for the rest of the project, we will always use the same action, needs not even a tip action because it will «Pop X zip» But there is no way to use the name of the button in this action at all. Joint action is possible with X as the parameter, and then you can assign it to all the buttons that have need of this action. But why do you want that the link between the button name and the name of the slide?  Can you explain? My Captivate intuition tells me that there is a misunderstanding, perhaps because of your experiences of Lectora. Captivate is really different, presented on the differences in workflow with an expert Lectora. I no longer use Lectora but the structure, and certainly the way to 'script' is totally different.

• How cut a PDF paginated in two several PDF Pages in the same Document?

  I had a single, paginated Document PDF which must be extended with the same content as summarized on page 2.

  The PDF is interactive / writable.

  I have Adobe Acrobat Pro installed in the company.

  What are the options I have:

  (1) add a second page or

  (2) pull the long page and divide it into two pages

  (3)... maybe another option?

  Thanks in advance for your help.

  The following example is an order page 2 page. He was fallible form fields. Each page has field name that has the same value on each page. There are lines of fields which are quantity, description, price and values extended and each field is named only by a number of basic suffix zero. The second page has a subtotal field that summarizes the value of each line on each page. The expanded field and subtotal field are calculated using document level scripts that calculate the field name using the extended calculation field name to get the prefix (page number) and the suffix (line number) to get the quantity and price, necessary to calculate fields.

  Order form Page 2

  This form is based on the pages generated using a template, and use the same code to calculate the pages based on a page having pioneered. This isn't a draft form for beginners, because it uses functions to perform repeated actions or calculations and calculates the exact name of the fields to use in the calculations of the domain name for the calculation script. More information is contained in Acrobat JavaScript QAnywhere and JavaScript reference Mozilla.

• How to make a transition between two particles (individual) or compositions?

  Hello

  I got two compositions (two layers), but I also mix the layer of simple particles if I want to...

  But I need to do the first particles to spin in the second layer, animation and text, is there a solution or how to do?

  Please tell me if someone knows, help!

  

  There are several tutorials out there to dissolve a layer, by turning the text into the sand and similar things. Use all those and then the time-remapping the composition to transform the shape of particles in your Word.

• How to make a link between two applications of ADF

  I use jdev 10.1.3.3 and ADF.
  
  I need navigate from one application to another application. for ex - a table has a column testid.it is show link. By clicking on the test id it should to go to another jspx. page in another application,
  I'm new to ADF.please help and give a suggestion how this can be realized.
  
  Please answer

  Paste the url of the page you want to see in the action golink property...

  In case you have two applications with security as login and session, sorry that can't be done. Go to the login page of the destination application.

  Published by: Rohit Hoon on April 23, 2009 02:08

• Cisco 877 VPN - two routers remote connection to the head office

  Hi all.

  Our headquarters has a 877.

  Our two remote sites also have 877 and they have a permanent tunnel in 877 headquarters which works OK.

  My problem is that two remote sites cannot talk to each other - but they can talk to the seat of fines.

  I guess I sort of NAT problem - so I'll post the relevant configs and if someone could take a look and point me in the right direction, I had to be very happy!

  Head office config is a txt 192.168.16.5 file

  Remote site 'Riversdale' is the 192.168.17.1 text file

  Remote site 'Tynewydd' is the 192.168.18.1 text file

  How have you checked with pings? Is this an internal host to internal host?

  You can check with pings between rays? Please use the internal interface of rays for both source and destination addresses. And send me 'Show details crypto session' of all the routers both before and after the sending of pings.

  One thing I forgot in your rays (both) config file is on NAT. Please reorganize both deny entries followed first allow entry.

  access-list 100 deny ip 192.168.17.0 0.0.0.255 192.168.16.0 0.0.0.255

  access-list 100 permit ip 192.168.17.0 0.0.0.255 any

  access-list 100 deny ip 192.168.17.0 0.0.0.255 192.168.18.0 0.0.0.255

• How to distinguish two Renault USB connected to the same PC?

  I now intend to do a system using two USB-6008.

  In this case, how can I distinguish two 6008 s? I mean, who becomes 'dev1 '?

  Also, is it possible to fix the naming of each device physics channl?

  If I could read the serial number (or machine id) of each data acquisition, it would be useful...

  (I use VB.NET).

  Thanks in advance...

  Dim Devices() As String = NationalInstruments.DAQmx.DaqSystem.Local.Devices
  Dim DeviceInfo As NationalInstruments.DAQmx.Device

  Dim X As Integer

  For X = 0 To Devices.GetUpperBound (0)
  DeviceInfo = NationalInstruments.DAQmx.DaqSystem.Local.LoadDevice ((X) Devices)
  MsgBox (DeviceInfo.DeviceID & "SN =" & DeviceInfo.SerialNumber.ToString)
  Next

  Make sure to add references to NationalInstruments.Common and NationalInstruments.DAQmx to the project.

  Structure DeviceInfo that come in handy as well other information

• How to remove a path between two anchor points

  Hello

  everything is in the title,

  could you tell me please how to remove a path between two anchor points without using the tool Eraser path?

  When I select these two folders and press to remove all disappeared.

  PS: I want to keep the anchor after the removal

  Thank you

  with the Selection tool direct (white pointer), click the path segment (no points) or select slide above without going on something else and tap on delete.

• Public static IPsec tunnel between two routers cisco [VRF aware]

  Hi all

  I am trying to configure static IPsec tunnel between two routers. Router R1 has [no VRF] only global routing table.

  Router R2 has two routing tables:

  * vrf INET - used for internet connectivity

  * global routing table - used for VPN connections

  Here are the basic configs:

  R1

  crypto ISAKMP policy 1
  BA 3des
  md5 hash
  preshared authentication
  Group 2
  ISAKMP crypto key 7V7u841k2D3Q7v98d6Y4z0zF address 203.0.0.3
  invalid-spi-recovery crypto ISAKMP
  !
  Crypto ipsec transform-set esp - aes 256 esp-sha-hmac TRSET_AES-256_SHA
  transport mode
  !
  Crypto ipsec TUNNEL-IPSEC-PROTECTION profile
  game of transformation-TRSET_AES-256_SHA
  !
  interface Loopback0
  10.0.1.1 IP address 255.255.255.255
  IP ospf 1 zone 0
  !
  interface Tunnel0
  IP 192.168.255.34 255.255.255.252
  IP ospf 1 zone 0
  source of tunnel FastEthernet0/0
  tunnel destination 203.0.0.3
  ipv4 ipsec tunnel mode
  Ipsec TUNNEL-IPSEC-PROTEC protection tunnel profile
  !
  interface FastEthernet0/0
  IP 102.0.0.1 255.255.255.0

  !

  IP route 203.0.0.3 255.255.255.255 FastEthernet0/0 102.0.0.2

  #######################################################

  R2

  IP vrf INET
  RD 1:1
  !
  Keyring cryptographic test vrf INET
  address of pre-shared-key 102.0.0.1 key 7V7u841k2D3Q7v98d6Y4z0zF
  !
  crypto ISAKMP policy 1
  BA 3des
  md5 hash
  preshared authentication
  Group 2
  invalid-spi-recovery crypto ISAKMP
  crypto isakmp profile test
  door-key test
  function identity address 102.0.0.1 255.255.255.255
  !
  Crypto ipsec transform-set esp - aes 256 esp-sha-hmac TRSET_AES-256_SHA
  transport mode
  !
  Crypto ipsec TUNNEL-IPSEC-PROTECTION profile
  game of transformation-TRSET_AES-256_SHA
  Test Set isakmp-profile
  !
  interface Loopback0
  IP 10.0.2.2 255.255.255.255
  IP ospf 1 zone 0
  !
  interface Tunnel0
  IP 192.168.255.33 255.255.255.252
  IP ospf 1 zone 0
  source of tunnel FastEthernet0/0
  tunnel destination 102.0.0.1
  ipv4 ipsec tunnel mode
  tunnel vrf INET
  Ipsec TUNNEL-IPSEC-PROTEC protection tunnel profile
  !
  interface FastEthernet0/0
  IP vrf forwarding INET
  IP 203.0.0.3 255.255.255.0

  !

  IP route 102.0.0.1 255.255.255.255 FastEthernet0/0 203.0.0.2

  #######################################################

  There is a router between R1 and R2, it is used only for connectivity:

  interface FastEthernet0/0
  IP 102.0.0.2 255.255.255.0
  !
  interface FastEthernet0/1
  IP 203.0.0.2 255.255.255.0

  The problem that the tunnel is not coming, I can't pass through phase I.

  The IPsec VPN are not my strength. So if someone could show me what mistake I make, I'd appreciate it really.

  I joined ouptup #debug R2 crypto isakmp

  Source and destination Tunnel0 is belong to VRF INET, the static route need to be updated.

  IP route vrf INET 102.0.0.1 255.255.255.255 FastEthernet0/0 203.0.0.2

  crypto isakmp profile test

  VRF INET

  door-key test
  function identity address 102.0.0.1 255.255.255.255

• Routing between two network cards

  I have 8 fiber switches that are configured to use a private network for management.

  The subnet is 192.168.8.0/24.

  I have a W2K3 (SERVER A) server with two NICS, a NIC (192.168.8.1) is attached to

  the 192.168.8.0 subnet and the other (192.168.100.14) NETWORK adapter is attached to the subnet 192.168.100.0/24.

  I put up two persistent routes of road between these NICS using the following commands:

  Pei route add 192.168.8.0 mask 255.255.255.0 192.168.100.14

  Pei route add 192.168.100.0 mask 255.255.255.0 192.168.8.1

  I have an other W2K3 server (SERVER B) with a single NETWORK (192.168.100.12) card that must be able

  to connect with the fiber switches via tcp/ip. Packets should be routed to this server.

  On that I put in place a permanent route:

  Pei route add 192.168.8.0 mask 255.255.255.0 192.168.100.14

  Everything works very well.

  (Assumes that the SERVER-A and SERVER B are now turned off)

  I'm trying to reproduce this on my VMware ESX Server 3.5upd3.

  ESX server has two NICS, one attached to each of the subnets. I create a virtual machine to replace SERVER-a

  with the same number of network cards and the same IP addresses.

  I then create routes as follows:

  Pei route add 192.168.8.0 mask 255.255.255.0 192.168.100.14

  Pei route add 192.168.100.0 mask 255.255.255.0 192.168.8.1

  PROBLEM: as soon as I add the second route I can no longer ping any server on the 192.168.100.0 subnet.

  This also causes connections to last very long.

  Do I need to implement routing between network adapters ESX scale to make this work?

  If so maybe want the command look like? If not, what could be my problem?

  Thank you for the helpful answers

  If you want to configure your machine as a router, you will need to notify the router is the next hop.  Now, the next machine break is its own interfaces, which will not work.  And since you are running some sort of routing protocol, provide two solutions to exit the server is not a good idea, because he doesn't know that one to use.  It will use 1 for some and another for some.

  Do what you intend (or I think you intend), you must delete the static routes and choose a default route, which will be your next jump.  This should be another router in your environment.  Then, the other servers that you want to route via ServerA, ServerA interface on this segment would remind you.

  Hope that makes sense.

  -KjB

• Want to use internet to share WRV210 router between two LANs

  Hello

  I have the following scenario:

  A LAN has access to internet via ADSL through a Fortigate 50B (192.168.100.0)

  A new LAN (different segment) that should have access to the internet. (192.168.102.0)

  Two local networks need to have shared access resources among themselves.

  We have a WRV210 router between two LANs (192.168.100.0 WAN, 192.168.102.0 on LAN) configured in router mode.

  Resources work very well, but internet does not work.

  We receive answers internet addresses on 192.168.102.0 ping and tracert works very well, but we cannot navigate or connect to Skype, msn msg, etc..

  We made on fortigate 50B routes this way:

  192.168.102.0/255.255.255.0 192.168.100.102 internal

  192.168.100.102 is an address WAN WRV210

  We tried the gateway mode and internet works fine on 192.168.102.0, but 192.168.100.0 cannot contact 192.168.102.0 resources (obviously)

  What can be wrong in case of ping and tracert works very well, but nothing else works?

  Hi Willy,.

  You need the WRV210 in not the router mode gateway mode.

  Gateway mode active Stateful inspection, which will address translation from private to public IP addresses and NAT....

  "But I think that the VLAN on the router segments members to talk to other members on the other vlan, so your comment.

  Two local networks need to have shared access resources among themselves. "creates a problem.

  .

  A community previous publication says "with Port Based VLAN on the WRV210, there is no VLAN tagging and so on." It's more like say port 1 not to talk to port 2, because they are on separate physically designated VLAN (even if on the same subnet) and it is far as it goes. But with your configuration you want also to have the 2nd SSID do not talk to any wired client based on the RVS4000 as well? If so, this facility would not work because all wireless clients would be able to talk to cable customers and vice versa. But if you primary concern is simply to prevent the SSID 1 speaking with 2 SSID, it's doable in the page VLAN for the WRV210.

  So if you want the WRV210 to allow switching between the VLAN port basis, it won't work the way it is set up now...

  If you want to restrict access between IP hosts, I suggest using the list feature to access a managed switch that focuses on the PC or servers.  A switch may be as a series of 200 or 300 small businesses switch, see URL below...

  http://www.Cisco.com/en/us/products/ps10898/prod_models_comparison.html

  But then allow all ports to be a member of the VLAN by default.  I hope that I read your question correctly

  Best regards, Dave