https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227448#M3348 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/1810778">@andrew005</a>&nbsp;</P> <P>Here one ACL that might work.</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">access-list 100 permit icmp 33.33.33.0 0.0.0.255 any echo-reply</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">access-list 100 deny ip 33.33.33.0 0.0.0.255 any</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">access-list 100 permit ip any any</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">Apply this ACL on the router 8, direction IN</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">&nbsp;</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet2/0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 33.33.33.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip access-group 100 in</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">duplex auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">speed auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">Internet host will not ping anything but will allow ping from other networks.</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">&nbsp;</P> Thu, 21 Nov 2024 21:17:00 GMT Flavio Miranda 2024-11-21T21:17:00Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227419#M3345 <P>Help me with ACL. I wrote the following commands, but computers from the Internet can still connect to the MAIN BUILDING and FILLIA 1 FILLIA 2 computers.</P> Thu, 21 Nov 2024 20:05:51 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227419#M3345 andrew005 2024-11-21T20:05:51Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227421#M3346 <P>Project</P> Thu, 21 Nov 2024 20:06:22 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227421#M3346 andrew005 2024-11-21T20:06:22Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227430#M3347 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/1810778">@andrew005</a>&nbsp;</P> <P>&nbsp; Did you apply the ACL to the right interface and right direction.?&nbsp;</P> <P>&nbsp;</P> Thu, 21 Nov 2024 20:26:33 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227430#M3347 Flavio Miranda 2024-11-21T20:26:33Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227448#M3348 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/1810778">@andrew005</a>&nbsp;</P> <P>Here one ACL that might work.</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">access-list 100 permit icmp 33.33.33.0 0.0.0.255 any echo-reply</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">access-list 100 deny ip 33.33.33.0 0.0.0.255 any</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">access-list 100 permit ip any any</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">Apply this ACL on the router 8, direction IN</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">&nbsp;</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet2/0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 33.33.33.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip access-group 100 in</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">duplex auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">speed auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">Internet host will not ping anything but will allow ping from other networks.</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">&nbsp;</P> Thu, 21 Nov 2024 21:17:00 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227448#M3348 Flavio Miranda 2024-11-21T21:17:00Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227475#M3349 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/178747">@Flavio Miranda</a>,&nbsp;Look, I configured ACLs in MAIN BUILDING, but for some reason I can't access the PUBLIC server through a browser, although TCP packets for it reach it. Everything is configured to access the server through the external port of the router.</P> Thu, 21 Nov 2024 22:46:10 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227475#M3349 andrew005 2024-11-21T22:46:10Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227489#M3350 <P>From where to where exactly you can´t?</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="FlavioMiranda_0-1732231747768.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/234318i56D8B1F579F1C932/image-size/medium?v=v2&amp;px=400" role="button" title="FlavioMiranda_0-1732231747768.png" alt="FlavioMiranda_0-1732231747768.png" /></span></P> <P>&nbsp;</P> Thu, 21 Nov 2024 23:29:43 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227489#M3350 Flavio Miranda 2024-11-21T23:29:43Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227491#M3351 <P>From PC2 to Server3</P><P>&nbsp;</P> Thu, 21 Nov 2024 23:32:58 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227491#M3351 andrew005 2024-11-21T23:32:58Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227495#M3352 <P>From PC22* to Server3 (PUBLIC in MAIN BUILDING)</P><P>&nbsp;</P> Thu, 21 Nov 2024 23:48:27 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227495#M3352 andrew005 2024-11-21T23:48:27Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227500#M3353 <P>I can access the server from PC 2.</P> <P>Now, if you are trying to access the server using the Router´s IP address, you dont have NAT for this.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="FlavioMiranda_1-1732233261193.png" style="width: 719px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/234322iD16B7179C6889BE3/image-dimensions/719x393?v=v2" width="719" height="393" role="button" title="FlavioMiranda_1-1732233261193.png" alt="FlavioMiranda_1-1732233261193.png" /></span></P> <P>&nbsp;</P> Thu, 21 Nov 2024 23:58:28 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227500#M3353 Flavio Miranda 2024-11-21T23:58:28Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227502#M3354 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="FlavioMiranda_2-1732233767210.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/234324i5E736E284539D81A/image-size/medium?v=v2&amp;px=400" role="button" title="FlavioMiranda_2-1732233767210.png" alt="FlavioMiranda_2-1732233767210.png" /></span></P> <P>If you add NAT, you can access the server using the router´s IP address. Take a look on the file attached.</P> Fri, 22 Nov 2024 00:04:14 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227502#M3354 Flavio Miranda 2024-11-22T00:04:14Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227504#M3355 <P>Test the file I sent to you</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="FlavioMiranda_0-1732233965831.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/234325iC5E5073AE445510E/image-size/medium?v=v2&amp;px=400" role="button" title="FlavioMiranda_0-1732233965831.png" alt="FlavioMiranda_0-1732233965831.png" /></span></P> <P>&nbsp;</P> Fri, 22 Nov 2024 00:06:17 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5227504#M3355 Flavio Miranda 2024-11-22T00:06:17Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5228520#M3356 <P>Can you send me commands you write in?</P> Mon, 25 Nov 2024 15:08:23 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5228520#M3356 andrew005 2024-11-25T15:08:23Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5228561#M3357 <P>Sorry I dont recall and I did not take notes. Take the show running config fro my file and compare with yours. It will be different&nbsp;</P> Mon, 25 Nov 2024 17:00:27 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5228561#M3357 Flavio Miranda 2024-11-25T17:00:27Z https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5228587#M3358 <P>Thank you!</P> Mon, 25 Nov 2024 17:39:32 GMT https://community.cisco.com/t5/discuss%C3%B5es-networking/problem-with-acl/m-p/5228587#M3358 andrew005 2024-11-25T17:39:32Z