Question : Problem: Vlan translation

I have an internet connection with a supplied vlan of 500, i have a switch with 2 vlans (502,503)
I want to perform translation so 502 and 503 have access to the internet. How do i perform this.
I have both vlans trunked to the router on fe 0/1 and vlan 500 (internet) coming in on f/e 0/0

Answer : Problem: Vlan translation

Okay, so you need to also add an access-list on each subinterface to restrict traffic to only the Internet.

For example (502 is 1.1.1.0/24 and 503 is 2.2.2.0/24).

ip access-list ext internet-only
deny 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255
deny 2.2.2.0 0.0.0.255 1.1.1.0 0.0.0.255
permit ip any any

int fa0/0
ip access-group internet-only in


int fa0/1
ip access-group internet-only in