Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Search results for query: *

  1. jlmdata

    C3560 Freakout on access-list!

    To make things easier I can explan how the flow and traffic should work. On top, ASA 5510, 192.168.3.2 Under, Cisco 3560, 192.168.3.3 Asa 5510, Here I set access-lists for public access like 3389 25 80 etc..and static (inside,outside) for each customer. Creating Routes inside for each...
  2. jlmdata

    C3560 Freakout on access-list!

    Hi, by this line : permit tcp host <your external IP address> 172.16.11.0 0.0.0.255 eq 3389 do you mean the external ip of the rdpserver? or a computer on the outside? (internet) ? The problem is that I want everyone on the outside, any computer to reach the rdpserver. That would mean 100000...
  3. jlmdata

    C3560 Freakout on access-list!

    As I was sure my problems where gone, a new problem appeard. When creating the access-list for popcorn : ip access-list extended popcorn deny tcp 172.16.0.0 0.0.255.255 192.168.192.0 0.0.0.255 neq smtp www 443 ftp 20 deny udp 172.16.0.0 0.0.255.255 192.168.192.0 0.0.0.255 neq ntp deny icmp...
  4. jlmdata

    C3560 Freakout on access-list!

    I think Ive solved it! This must work : ip access-list extended whiskey permit ip 172.16.11.0 0.0.0.255 172.16.0.0 0.0.255.255 deny tcp 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255 neq smtp www 443 ftp deny udp 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255 neq ntp deny icmp 172.16.0.0...
  5. jlmdata

    C3560 Freakout on access-list!

    Hi NetRx! I would like to have a access-list as clean as possible. ip access-list extended whiskey permit tcp ?outside 172.16.0.0 0.0.255.255 permit udp ?outside 172.16.0.0 0.0.255.255 permit icmp ?outside 172.16.0.0 0.0.255.255 deny tcp any 172.16.0.0 0.0.255.255 neq smtp www 443 ftp...
  6. jlmdata

    C3560 Freakout on access-list!

    Hi NetRx! Thanks alot for your work! The last "simpler method" seems good. Ive tried the example but internet visitors can only access these specific ports "neq smtp www 443 ftp". If I add 3389 I can RDP into the machine from the internet. Because I have allowed RDP on the asa 5510 to that...
  7. jlmdata

    C3560 Freakout on access-list!

    The reason why I want internet visitors to have "permit ip any any" is because the firewall infront of the Cisco 3560, ASA 5510 will be used to configure public IP access rules.
  8. jlmdata

    C3560 Freakout on access-list!

    This seems to work between the networks! Thanks alot for your help! But, internet traffic from outside are not allowed to surf Whiskey webserver? I had to put "permit ip any any" on the access-list and now all rules are broken because of that. Thats why I used the neq port command. How can I...
  9. jlmdata

    C3560 Freakout on access-list!

    Hi! Thanks for your help, but when I change groups to IN, there is no limit at all, all tcp ports are open hmm ? Maybe you can write me an example? Only specified ports should be open between networks 192.168.192.0 and 172.16.0.0, all other networks (internet) should be open. Access-lists for...
  10. jlmdata

    Why doesnt this access-list work?

    Im unable to open port 80 tcp between these lans, why? Only permitted ports should be open between lans. interface Vlan8 ip address 172.16.8.1 255.255.255.0 ip access-group bb2 out ! interface Vlan192 ip address 192.168.192.1 255.255.255.0 ip access-group bb1 out ip access-list extended...
  11. jlmdata

    C3560 Freakout on access-list!

    Hi! This is driving me nuts, hopefully someone can clear things up here.. I have set up 4 vlans, each vlan is a customer network, using the 3560 as default gateway. Customers should be able to talk eachother BUT only through ports (tcp) , like smtp, www, https, dns, ftp.... Im controlling...
  12. jlmdata

    Uturn traffic on asa or other solution?

    Hello! Here is my story. Cisco 3560 (1) on top, splitting the internet into 2 subnets. Asa 5510 with /24 bits internet subnet. On the Asa I have a bunch of outside interfaces for internal networks. Each internal network has a public IP. How can I make a internal IP talk to another outside...
  13. jlmdata

    Im stuck, example config for Cisco 3560 please

    Hello Burtsbees! Thanks alot for the example! It was something like this I tried to achieve. But I did use internet Fa0/24 without vlan, How about adding a second ISP provider? I guess these would change? ip default-gateway 83.x.x.101 ip route 0.0.0.0 0.0.0.0 83.x.x.101 Any clues? Thanks Dude!
  14. jlmdata

    Im stuck, example config for Cisco 3560 please

    Hello! I have some issues setting up cisco 3560. This is what I plan to achieve: Internet provider linknetwork 83.x.x.100/30 IP 83.x.x.102, gw 83.x.x.101. RIPE NCC network assigned 193.xx.2.0-193.xx.3.255 I want the 3560 on top of the network. And the ASA5510 after that. With network...
  15. jlmdata

    VMWARE ESX + Windows 2008 STD + ASA 5505

    All shares becomes offline, even the Common Share which is not "cached offline". If i turn off snmp om the printer it will never get offline. One of the ASA 5505 is running on a ADSL line, i believe it could be the issue, if the line drops, and connects directly, how long will it take for the...
  16. jlmdata

    Software restrictions, Windows Terminal Server

    Does anyone know how normal 32-bit software restricts itself by not be runnable on Windows Terminal Services? The Error is like " This software is not licensed under Windows Terminal Server". I know this is often a license issue, but I really want to know. Any Idea?
  17. jlmdata

    VMWARE ESX + Windows 2008 STD + ASA 5505

    We are having problems with WAN/VPN connection to a Windows 2008 STD Network. Suddenly "Offline Files" becomes Offline, we can also see that printers become Offline using SNMP. When the connections seems to come back, the printers never gets back to Online, a net stop/start spooler is necessary...
  18. jlmdata

    Briefcase/Offline files one way sync.

    Hello, A company uses offline files for "My documents" for laptop use. They also want to sync "Common files" but only one way, files should only be downloaded to the laptops. sync upwards back to "Common files" on server should be blocked, any way to do this?
  19. jlmdata

    Office sync of shared files

    What is the best solution for laptop users to sync files offline that are shared on the local network in a common folder on the server???? Sync Shared files might be a problem, but is there a solution?
  20. jlmdata

    Asa 5505, NAT DNS REWRITE?

    I cant get this to work, I checked the option "Translate the DNS replies that match the translation rule" under NAT Options in Cisco ASDM I want this to be reached from inside LAN by dns name. static (inside,outside) tcp 194.x.x.x 8080 192.168.255.12 8080 netmask 255.255.255.255 The external...

Part and Inventory Search

Back
Top