access-l question

[Oh]

Hi. I want vpn client user can only access

http://www and

ftp. I setting access-list as this way:
access-l 100 permit tcp host 172.x.x.x 192.x.x.0 255.255.255.0 eq

http://www and

access-l 100 permit tcp host 172.x.x.x 192.x.x.0 255.255.255.0 eq ftp but not working. hitcount is 0. when I change to access-l 100 permit IP host 172.x.x.x 192.x.x.0 255.255.255.0 everything is working. Why?

 

[IPKONFIG]

Do you see hits on your ACL when you chage it back?

The ACL should be in the format of:

[permit/deny] [ip/tcp/udp] [src-ip] [src-msk] [dst-ip] [dst-msk] [service]

"I can picture a world without war. A world without hate. A world without fear. And I can picture us attacking that world, because they'd never expect it."
- Jack Handey, Deep Thoughts