Hello, I installed a new IOS on my 2950 IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(19)EA1, RELEASE SOFTWARE (fc2) Copyright (c) 1986-2003 by cisco Systems, Inc. Compiled Thu 23-Oct-03 18:40 by yenanh I'd like to be able to protect the management vlan with ACLs. the management VLAN has an IP Address and there is another computer on hte VLAN. I would like to protect access t othat computer using the catalyst ACLS. I am not able to do it because ACL works only for the IP subnet of the IP Address of the management VLAN. How can I Solve this problem? maybe it is not possible to use the catalyst 2950 as a packet filter ? thanks Rick