GregSnider
Technical User
I need to create an inbound access list to allow https (443) and PPP-VPN (1723) and an outbound access list to allow smtp (25) and dns (53) and deny everything else. I could use some help with syntax. thanks
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
ACL on 2500 router
- Thread starter GregSnider
- Start date
- Status
access-list 101 permit udp any host 10.1.1.1 eq domain log
access-list 101 permit udp any eq domain host 10.1.1.1 log
access-list 101 permit tcp any host 10.1.1.3 eq smtp log
access-list 101 permit tcp any host 10.1.1.4 eq 443 log
access-list 101 deny ip any any log
You really don't need to specify outbound for the dns or smtp.
ip access-group 101 in should do just fine.
The two dns entries are for allowing inbound and outbound dns resolution within and outside of your network.
access-list 101 permit udp any eq domain host 10.1.1.1 log
access-list 101 permit tcp any host 10.1.1.3 eq smtp log
access-list 101 permit tcp any host 10.1.1.4 eq 443 log
access-list 101 deny ip any any log
You really don't need to specify outbound for the dns or smtp.
ip access-group 101 in should do just fine.
The two dns entries are for allowing inbound and outbound dns resolution within and outside of your network.
- Status
Similar threads
- Locked
- Question