deny access to file sharing in VPN

[vedatshabani]

Hi. I have created VPN between two Cisco routers 1700. Everything works fine, but what I want now is that I have to deny access to files that are shared in the network to both sides of VPN. How can I deny this access, that PC's on other side can't see my files that are shared? This deny I want to aply in the configuration of the routers. I hope that I raised fine my problem...

 

[burtsbees]

Please be more specific---include IP addresses that you want to allow and deny as well. Also include the private IP range that is assigned to the connecting client to the VPN.

Burt

 

[vedatshabani]

My VPN is configured like below:

crypto map VPN 3 ipsec-isakmp
...
match address VPN-3

ip access-list extended VPN-3
permit tcp host 10.0.0.197 host 192.168.53.204
permit tcp host 10.0.0.100 host 192.168.53.204
permit tcp host 10.0.0.128 host 192.168.53.204

My inside interface has these access-groups:

interface FastEthernet0
ip address 10.0.0.254 255.255.255.0
ip access-group F0-IN in
ip access-group F0-OUT out


I want to use VPN just for connection to FTP Server from my network 10.0.0.0 in the ip address 192.168.53.204.
And I want to deny every try of connection from 192.168.53.204 where destination is my network 10.0.0.0.

I tried to add some ACL to FO-OUT like:

Extended IP access list F0-OUT
permit tcp 192.168.53.204 255.255.255.255 eq ftp any log
permit tcp 192.168.53.204 255.255.255.255 eq ftp-data any
deny ip host 192.168.53.204 10.0.0.0 0.0.0.255 log

But these ACL deny also some ports behind of FTP server when it use some other ports then 20 and 21 to transfer data in FTP.
Do you have now any idea how I can solve this issue?

 

[plshlpme]

your problem is that at the end of an acl there is an implicit deny statement.
so if it doesnt match any of your acls entries it will be denied.

so your going to have to think your rules through and know exactly what you wish to permit and deny.then you can go about putting those rules into the acl and decide the best interface to apply them to.