Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Why doesnt this access-list work?

Status
Not open for further replies.

jlmdata

IS-IT--Management
Aug 9, 2007
31
0
0
SE
Im unable to open port 80 tcp between these lans, why?
Only permitted ports should be open between lans.

interface Vlan8
ip address 172.16.8.1 255.255.255.0
ip access-group bb2 out
!
interface Vlan192
ip address 192.168.192.1 255.255.255.0
ip access-group bb1 out


ip access-list extended bb1
permit ip 192.168.192.0 0.0.0.255 any
permit tcp any any eq deny tcp 172.16.0.0 0.0.255.255 any
permit ip any any

ip access-list extended bb2
permit ip 172.16.8.0 0.0.0.255 any
permit tcp any any eq deny tcp 172.16.0.0 0.0.255.255 any
deny tcp 192.168.192.0 0.0.0.255 any
permit ip any any
 
vlan8=bb2? vlan192=bb1? Please clarify. If this is correct, then your acl's are pointed the wrong way---they need to be inbound, not out.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top