topic Re: ACL to Access Similar Ports from Different Networks in Network Security

ACL to Access Similar Ports from Different Networks

indraadi82 — Fri, 21 Feb 2020 15:31:40 GMT

Hi,

I need to allow few public IPs (example: 116.x.x.x, 116.x.x.y) to access my VM on 117.x.x.x with all ports accessible, BUT, at the same time, allow other IPs than those mentioned before to access my VM ONLY to its port 80 and 443 (other ports are not accessible).

Is this possible?

Thanks!

Re: ACL to Access Similar Ports from Different Networks

Dennis Mink — Sun, 18 Mar 2018 11:25:25 GMT

Yes this is possible.

define your public IP's to all ports on your VM first

then define the specifc public IPs on port 80 and 443

Re: ACL to Access Similar Ports from Different Networks

Florin Barhala — Mon, 19 Mar 2018 10:23:39 GMT

First of all are you using NAT?
So take care of NAT and map the required ports to a public IP.
Then an access-list on outside direction in should allow
src: 116.x.x.x, 116.x.x.y dst: VM_NAT_public_IP service: any
src: any dst: VM_NAT_public_IP service: http&https