Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Open multiple ports on 3560

Status
Not open for further replies.

pcclinic4u

IS-IT--Management
Oct 13, 2011
1
US
Need to open the following ports:

TCP Ports: 22, 80, 443, 587, 2002, 4242, 5309, 9999, 12975, 32976

UPD Ports: 123, 4443, 17771

to internal IP of 10.0.0.22

Please help!
 
A 3560 doesn't firewall traffic by default, though it's a multilayer switch and could potentially do so.

Assuming you are running this as a multilayer switch, and you're trying to define an ACL to permit any source to reach those specific destinations, and you only want to restrict access for that one server while permitting all other traffic:

access-list 100 permit tcp any host 10.0.0.22 eq 22
access-list 100 permit tcp any host 10.0.0.22 eq www
access-list 100 permit tcp any host 10.0.0.22 eq 443
access-list 100 permit tcp any host 10.0.0.22 eq 587
access-list 100 permit tcp any host 10.0.0.22 eq 2002
access-list 100 permit tcp any host 10.0.0.22 eq 4242
access-list 100 permit tcp any host 10.0.0.22 eq 5309
access-list 100 permit tcp any host 10.0.0.22 eq 9999
access-list 100 permit tcp any host 10.0.0.22 eq 12975
access-list 100 permit tcp any host 10.0.0.22 eq 32976
access-list 100 permit udp any host 10.0.0.22 eq 123
access-list 100 permit udp any host 10.0.0.22 eq 4443
access-list 100 permit udp any host 10.0.0.22 eq 17771
access-list 100 deny ip any host 10.0.0.22
access-list 100 permit ip any any

You'd then need to associate the ACL with the interface you want it applied to, and specify the direction. All traffic except for this will be denied.

CCNP, CCDP, CCIP
Core Network Planner, ISP
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top