Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Recent content by jlmdata
-
C3560 Freakout on access-list!
To make things easier I can explan how the flow and traffic should work. On top, ASA 5510, 192.168.3.2 Under, Cisco 3560, 192.168.3.3 Asa 5510, Here I set access-lists for public access like 3389 25 80 etc..and static (inside,outside) for each customer. Creating Routes inside for each... -
C3560 Freakout on access-list!
Hi, by this line : permit tcp host <your external IP address> 172.16.11.0 0.0.0.255 eq 3389 do you mean the external ip of the rdpserver? or a computer on the outside? (internet) ? The problem is that I want everyone on the outside, any computer to reach the rdpserver. That would mean 100000... -
C3560 Freakout on access-list!
As I was sure my problems where gone, a new problem appeard. When creating the access-list for popcorn : ip access-list extended popcorn deny tcp 172.16.0.0 0.0.255.255 192.168.192.0 0.0.0.255 neq smtp www 443 ftp 20 deny udp 172.16.0.0 0.0.255.255 192.168.192.0 0.0.0.255 neq ntp deny icmp... -
C3560 Freakout on access-list!
I think Ive solved it! This must work : ip access-list extended whiskey permit ip 172.16.11.0 0.0.0.255 172.16.0.0 0.0.255.255 deny tcp 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255 neq smtp www 443 ftp deny udp 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255 neq ntp deny icmp 172.16.0.0... -
C3560 Freakout on access-list!
Hi NetRx! I would like to have a access-list as clean as possible. ip access-list extended whiskey permit tcp ?outside 172.16.0.0 0.0.255.255 permit udp ?outside 172.16.0.0 0.0.255.255 permit icmp ?outside 172.16.0.0 0.0.255.255 deny tcp any 172.16.0.0 0.0.255.255 neq smtp www 443 ftp... -
C3560 Freakout on access-list!
Hi NetRx! Thanks alot for your work! The last "simpler method" seems good. Ive tried the example but internet visitors can only access these specific ports "neq smtp www 443 ftp". If I add 3389 I can RDP into the machine from the internet. Because I have allowed RDP on the asa 5510 to that... -
C3560 Freakout on access-list!
The reason why I want internet visitors to have "permit ip any any" is because the firewall infront of the Cisco 3560, ASA 5510 will be used to configure public IP access rules. -
C3560 Freakout on access-list!
This seems to work between the networks! Thanks alot for your help! But, internet traffic from outside are not allowed to surf Whiskey webserver? I had to put "permit ip any any" on the access-list and now all rules are broken because of that. Thats why I used the neq port command. How can I... -
C3560 Freakout on access-list!
Hi! Thanks for your help, but when I change groups to IN, there is no limit at all, all tcp ports are open hmm ? Maybe you can write me an example? Only specified ports should be open between networks 192.168.192.0 and 172.16.0.0, all other networks (internet) should be open. Access-lists for... -
Why doesnt this access-list work?
Im unable to open port 80 tcp between these lans, why? Only permitted ports should be open between lans. interface Vlan8 ip address 172.16.8.1 255.255.255.0 ip access-group bb2 out ! interface Vlan192 ip address 192.168.192.1 255.255.255.0 ip access-group bb1 out ip access-list extended... -
C3560 Freakout on access-list!
Hi! This is driving me nuts, hopefully someone can clear things up here.. I have set up 4 vlans, each vlan is a customer network, using the 3560 as default gateway. Customers should be able to talk eachother BUT only through ports (tcp) , like smtp, www, https, dns, ftp.... Im controlling... -
Uturn traffic on asa or other solution?
Hello! Here is my story. Cisco 3560 (1) on top, splitting the internet into 2 subnets. Asa 5510 with /24 bits internet subnet. On the Asa I have a bunch of outside interfaces for internal networks. Each internal network has a public IP. How can I make a internal IP talk to another outside...- jlmdata
- Thread
- Replies: 1
- Forum: Security, hacker detection & forensics
-
Im stuck, example config for Cisco 3560 please
Hello Burtsbees! Thanks alot for the example! It was something like this I tried to achieve. But I did use internet Fa0/24 without vlan, How about adding a second ISP provider? I guess these would change? ip default-gateway 83.x.x.101 ip route 0.0.0.0 0.0.0.0 83.x.x.101 Any clues? Thanks Dude! -
Im stuck, example config for Cisco 3560 please
Hello! I have some issues setting up cisco 3560. This is what I plan to achieve: Internet provider linknetwork 83.x.x.100/30 IP 83.x.x.102, gw 83.x.x.101. RIPE NCC network assigned 193.xx.2.0-193.xx.3.255 I want the 3560 on top of the network. And the ASA5510 after that. With network... -
VMWARE ESX + Windows 2008 STD + ASA 5505
All shares becomes offline, even the Common Share which is not "cached offline". If i turn off snmp om the printer it will never get offline. One of the ASA 5505 is running on a ADSL line, i believe it could be the issue, if the line drops, and connects directly, how long will it take for the...- jlmdata
- Post #3
- Forum: Microsoft: Windows servers
