To make things easier I can explan how the flow and traffic should work.
On top, ASA 5510, 192.168.3.2
Under, Cisco 3560, 192.168.3.3
Asa 5510,
Here I set access-lists for public access like 3389 25 80 etc..and static (inside,outside) for each customer.
Creating Routes inside for each...
Hi, by this line :
permit tcp host <your external IP address> 172.16.11.0 0.0.0.255 eq 3389
do you mean the external ip of the rdpserver? or a computer on the outside? (internet) ?
The problem is that I want everyone on the outside, any computer to reach the rdpserver. That would mean 100000...
As I was sure my problems where gone, a new problem appeard.
When creating the access-list for popcorn :
ip access-list extended popcorn
deny tcp 172.16.0.0 0.0.255.255 192.168.192.0 0.0.0.255 neq smtp www 443 ftp 20
deny udp 172.16.0.0 0.0.255.255 192.168.192.0 0.0.0.255 neq ntp
deny icmp...
Hi NetRx!
I would like to have a access-list as clean as possible.
ip access-list extended whiskey
permit tcp ?outside 172.16.0.0 0.0.255.255
permit udp ?outside 172.16.0.0 0.0.255.255
permit icmp ?outside 172.16.0.0 0.0.255.255
deny tcp any 172.16.0.0 0.0.255.255 neq smtp www 443 ftp...
Hi NetRx!
Thanks alot for your work!
The last "simpler method" seems good.
Ive tried the example but internet visitors can only access these specific ports "neq smtp www 443 ftp". If I add 3389 I can RDP into the machine from the internet. Because I have allowed RDP on the asa 5510 to that...
The reason why I want internet visitors to have "permit ip any any" is because the firewall infront of the Cisco 3560, ASA 5510 will be used to configure public IP access rules.
This seems to work between the networks! Thanks alot for your help!
But, internet traffic from outside are not allowed to surf Whiskey webserver?
I had to put "permit ip any any" on the access-list and now all rules are broken because of that.
Thats why I used the neq port command. How can I...
Hi!
Thanks for your help, but when I change groups to IN, there is no limit at all, all tcp ports are open hmm ?
Maybe you can write me an example?
Only specified ports should be open between networks 192.168.192.0 and 172.16.0.0, all other networks (internet) should be open.
Access-lists for...
Im unable to open port 80 tcp between these lans, why?
Only permitted ports should be open between lans.
interface Vlan8
ip address 172.16.8.1 255.255.255.0
ip access-group bb2 out
!
interface Vlan192
ip address 192.168.192.1 255.255.255.0
ip access-group bb1 out
ip access-list extended...
Hi!
This is driving me nuts, hopefully someone can clear things up here..
I have set up 4 vlans, each vlan is a customer network, using the 3560 as default gateway.
Customers should be able to talk eachother BUT only through ports (tcp) , like smtp, www, https, dns, ftp....
Im controlling...
Hello!
Here is my story.
Cisco 3560 (1) on top, splitting the internet into 2 subnets.
Asa 5510 with /24 bits internet subnet.
On the Asa I have a bunch of outside interfaces for internal networks. Each internal network has a public IP.
How can I make a internal IP talk to another outside...
Hello Burtsbees!
Thanks alot for the example! It was something like this I tried to achieve. But I did use internet Fa0/24 without vlan, How about adding a second ISP provider?
I guess these would change?
ip default-gateway 83.x.x.101
ip route 0.0.0.0 0.0.0.0 83.x.x.101
Any clues?
Thanks Dude!
Hello!
I have some issues setting up cisco 3560.
This is what I plan to achieve:
Internet provider linknetwork 83.x.x.100/30
IP 83.x.x.102, gw 83.x.x.101.
RIPE NCC network assigned 193.xx.2.0-193.xx.3.255
I want the 3560 on top of the network.
And the ASA5510 after that. With network...
All shares becomes offline, even the Common Share which is not "cached offline". If i turn off snmp om the printer it will never get offline. One of the ASA 5505 is running on a ADSL line, i believe it could be the issue, if the line drops, and connects directly, how long will it take for the...
Does anyone know how normal 32-bit software restricts itself by not be runnable on Windows Terminal Services?
The Error is like " This software is not licensed under Windows Terminal Server".
I know this is often a license issue, but I really want to know.
Any Idea?
We are having problems with WAN/VPN connection to a Windows 2008 STD Network. Suddenly "Offline Files" becomes Offline, we can also see that printers become Offline using SNMP. When the connections seems to come back, the printers never gets back to Online, a net stop/start spooler is necessary...
Hello,
A company uses offline files for "My documents" for laptop use. They also want to sync "Common files" but only one way, files should only be downloaded to the laptops. sync upwards back to "Common files" on server should be blocked, any way to do this?
What is the best solution for laptop users to sync files offline that are shared on the local network in a common folder on the server????
Sync Shared files might be a problem, but is there a solution?
I cant get this to work,
I checked the option "Translate the DNS replies that match the translation rule" under NAT Options in Cisco ASDM
I want this to be reached from inside LAN by dns name.
static (inside,outside) tcp 194.x.x.x 8080 192.168.255.12 8080 netmask 255.255.255.255
The external...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.