How to blockone VLAN access to other

[chicagotech]

We have 3 VLANs, Data, Student and Teacher. We want to the Data can access student and etacher but no otehr way. Here are commands.

Recreated the scenario and sent the configuration changes required to be done.

access-list STUDENT_access_in permit icmp any any unreachable
access-list STUDENT_access_in permit icmp any any time-exceeded
access-list STUDENT_access_in permit icmp any any echo-reply
access-list STUDENT_access_in deny ip 10.2.0.0 255.255.255.0 10.0.0.0 255.255.0.0<-------
access-list STUDENT_access_in permit ip any any


access-list TEACHER_access_in permit icmp any any unreachable
access-list TEACHER_access_in permit icmp any any time-exceeded
access-list TEACHER_access_in permit icmp any any echo-reply
access-list TEACHER_access_in deny ip 10.1.0.0 255.255.255.0 10.0.0.0 255.255.0.0<---------
access-list TEACHER_access_in permit ip any any