Hello All,
I'm trying to allow just a certain port to communicate between a CISCO 3600 and CISCO 1601R on a T1 point-to-point. Can any body help, please?
Thanks,
best thing is to create a extended acl where you permit the ports you want and deny everything else. Just make sure you don't deny ports you actually want open.
access-list 101 permit udp any any eq <port>
access-list 101 deny ip any any
Then apply it to the interface(s):
int <if_name>
access-group 101 in
"access-group 101 out" might work better. You'll need to consider your requirements.
The "deny ip any any" isn't really needed, but I like to add it as a reminder. As soon as you create an ACL there's an implicit "deny" at the end.
Note that this will whack ALL IP traffic inbound (or outbound) for the interfaces on which it's applied. Be very careful. For instance, if you apply this to a remote router's serial i/f, you'll lose your telnet connection.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.