topic Access list. in Network Security

Access list.

vrush_192000 — Mon, 11 Mar 2019 10:53:33 GMT

I am trying to configure ACL for remote location, accessing one of application on specific port. At remote side they have created a VLAN (e.g. 11.1.x.x) and at main office inside VLAN is 11.2.x.x. I have added route(ip of remote router) to pix and applied this ACL to the outside interface. But the remote user is unable to access application.

For example:

access-list inside_acl 11.1.0.0 255.255.255.0 host 11.2.0.1 eq 23678

where,

11.1.0.0=> remote network

11.2.0.1=> server/host at main office

I am confused whether to apply this acl to Inside interface or Outside interface.

Re: Access list.

Jon Marshall — Sun, 05 Aug 2007 17:59:40 GMT

You need to apply this on the outside interface of your pix in the inbound direction as the user is in the remote office and is sending traffic to your vlan.

Be aware that there is an implict deny at the end of each access-list so if you apply that access-list as is it will only allow port 23768 from vlan 11.1.x.x through.

HTH

Jon

Re: Access list.

purohit_810 — Sun, 05 Aug 2007 18:01:38 GMT

Create it as a Extended permit, it should work.

access-list 100 extended permit tcp 172.16.1.0 255.255.255.0 10.1.1.0

255.255.255.0 eq 2000

and put it as on interface as a Outbound.

Regards,

Dharmesh Purohit

Re: Access list.

purohit_810 — Sun, 05 Aug 2007 18:07:41 GMT

See same as you are asking on below Link.. ACL EXAMPLES:

http://www.netcraftsmen.net/welcher/papers/pix02.html

REgards,

Dharmesh Purohit

Re: Access list.

vrush_192000 — Mon, 06 Aug 2007 11:55:12 GMT

Dear All,

Thanks...