We currently have a router and we have setup PBR on it. When the user arrives on the router and its an internet traffic, it should go out through the ADSL and if not, it should connect to the other way i.e RDP, printing. The only problem is that its making all the dns request on the second link, once there is no connection from the second link, no one can browse the internet.
Anyone knows how to do refine our ACL
access-list 101 permit tcp any any eq www
access-list 101 permit tcp any any eq 443
access-list 101 permit tcp any any eq ftp
access-list 101 permit tcp any any eq 5938
access-list 101 permit tcp any any eq smtp
access-list 101 permit tcp any any eq 88
access-list 101 permit tcp any any eq 4007
access-list 101 deny icmp any any
access-list 101 deny tcp any any
access-list 101 permit tcp any any eq 3389
access-list 101 permit icmp any any
access-list 102 deny tcp any any eq www
access-list 102 deny tcp any any eq domain
access-list 102 deny udp any any eq domain
access-list 102 deny tcp any any eq 443
access-list 102 deny tcp any any eq ftp
access-list 102 deny tcp any any eq 5938
access-list 102 deny tcp any any eq smtp
access-list 102 deny tcp any any eq 88
access-list 102 permit tcp any any
Anyone knows how to do refine our ACL
access-list 101 permit tcp any any eq www
access-list 101 permit tcp any any eq 443
access-list 101 permit tcp any any eq ftp
access-list 101 permit tcp any any eq 5938
access-list 101 permit tcp any any eq smtp
access-list 101 permit tcp any any eq 88
access-list 101 permit tcp any any eq 4007
access-list 101 deny icmp any any
access-list 101 deny tcp any any
access-list 101 permit tcp any any eq 3389
access-list 101 permit icmp any any
access-list 102 deny tcp any any eq www
access-list 102 deny tcp any any eq domain
access-list 102 deny udp any any eq domain
access-list 102 deny tcp any any eq 443
access-list 102 deny tcp any any eq ftp
access-list 102 deny tcp any any eq 5938
access-list 102 deny tcp any any eq smtp
access-list 102 deny tcp any any eq 88
access-list 102 permit tcp any any