topic Re: Problem with my ACL, only HTTP and HTTPS allowed on vlan 10 but the webpage stays unreachable in Network Access Control

Problem with my ACL, only HTTP and HTTPS allowed on vlan 10 but the webpage stays unreachable

Searon — Mon, 24 Aug 2020 16:58:07 GMT

Dear Cisco Community,

I am configuring this ACL to only have HTTP and HTTPS access to the server 10.0.0.2 on vlan 10, but I am doing something wrong as I am unable to reach the webpage anymore after I enable the ACL.

It's probably something small I am overlooking, any help is appreciated.

brussel(config)#ip access-list extended server
brussel(config-ext-nacl)#permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.2 eq 80
brussel(config-ext-nacl)#permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.2 eq 443
brussel(config-ext-nacl)#deny ip any host 10.0.0.2
brussel(config-ext-nacl)#int g0/1
brussel(config-if)#ip access-group server in

Re: Problem with my ACL, only HTTP and HTTPS allowed on vlan 10 but the webpage stays unreachable

balaji.bandi — Mon, 24 Aug 2020 17:49:22 GMT

what is the out come removing "deny ip any host 10.0.0.2" and try ?

Re: Problem with my ACL, only HTTP and HTTPS allowed on vlan 10 but the webpage stays unreachable

Searon — Mon, 24 Aug 2020 18:03:00 GMT

Weird, still not able to reach the page the moment I remove the total ACL I get instant webpage...

Does that mean this is wrong?

brussel(config-ext-nacl)#permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.2 eq 80

brussel(config-ext-nacl)#permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.2 eq 443

Re: Problem with my ACL, only HTTP and HTTPS allowed on vlan 10 but the webpage stays unreachable

Mohammed al Baqari — Mon, 24 Aug 2020 18:06:45 GMT

Hi,

You are applying the ACL on the wrong interface/direction. According to
your ACL syntax, it should be applied on G0/0 in inbound direction or G0/1
in outbound direction. Applying it on G0/1 in inbound direction is wrong.

**** please remember to rate useful posts

Re: Problem with my ACL, only HTTP and HTTPS allowed on vlan 10 but the webpage stays unreachable

Searon — Mon, 24 Aug 2020 18:19:56 GMT

Yep, this was the problem. Something to remember, thanks for your help!

Re: Problem with my ACL, only HTTP and HTTPS allowed on vlan 10 but the webpage stays unreachable

balaji.bandi — Mon, 24 Aug 2020 19:15:04 GMT

Good catch it was the wrong interface.