Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Access List not working right...

Status
Not open for further replies.

LloydSev

ISP
Jan 23, 2003
1,457
US
access-list Outside_In permit ip host 66.179.26.136 any
access-list Outside_In permit tcp any host 193.100.1.20 eq 80
access-list Outside_In permit tcp any host 193.100.1.21 eq 80
access-list Outside_In permit ip any host 193.100.1.59

I started with this access list being tied to my outside interface.

But I could not contact host 193.100.1.20 via the static command.

So I went ahead and thought maybe it's because I can't ping it... so I made it this...

access-list Outside_In permit ip host 66.179.26.136 any
access-list Outside_In permit tcp any host 193.100.1.20 eq 80
access-list Outside_In permit icmp any host 193.100.1.20 echo-reply
access-list Outside_In permit icmp any host 193.100.1.20 source-quench
access-list Outside_In permit icmp any host 193.100.1.20 unreachable
access-list Outside_In permit icmp any host 193.100.1.20 time-exceeded
access-list Outside_In permit tcp any host 193.100.1.21 eq 80
access-list Outside_In permit icmp any host 193.100.1.21 echo-reply
access-list Outside_In permit icmp any host 193.100.1.21 source-quench
access-list Outside_In permit icmp any host 193.100.1.21 unreachable
access-list Outside_In permit icmp any host 193.100.1.21 time-exceeded
access-list Outside_In permit ip any host 193.100.1.59

but I still can't connect to the mail or web servers any longer after that... what's up with my config that I can't connect via the internet to the servers?

Computer/Network Technician
CCNA
 
I found my answer..

I was using my internal IP address for the ACL and not the staticly translated IP address for the ACL. my bad.

works now using the 4 line ACL with just a different IP.

Computer/Network Technician
CCNA
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top