Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Why doesnt this access-list work?

Status
Not open for further replies.

jlmdata

IS-IT--Management
Aug 9, 2007
31
SE
Im unable to open port 80 tcp between these lans, why?
Only permitted ports should be open between lans.

interface Vlan8
ip address 172.16.8.1 255.255.255.0
ip access-group bb2 out
!
interface Vlan192
ip address 192.168.192.1 255.255.255.0
ip access-group bb1 out


ip access-list extended bb1
permit ip 192.168.192.0 0.0.0.255 any
permit tcp any any eq deny tcp 172.16.0.0 0.0.255.255 any
permit ip any any

ip access-list extended bb2
permit ip 172.16.8.0 0.0.0.255 any
permit tcp any any eq deny tcp 172.16.0.0 0.0.255.255 any
deny tcp 192.168.192.0 0.0.0.255 any
permit ip any any
 
vlan8=bb2? vlan192=bb1? Please clarify. If this is correct, then your acl's are pointed the wrong way---they need to be inbound, not out.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top