topic ACL Not working in Network Security

ACL Not working

Joli Martinez — Tue, 12 Mar 2019 06:42:43 GMT

I would like to allow RDP in from only a specified IP. Right now RDP is not allowed from any IP, but SSH is allowed in

FastEthernet 0/0 is my WAN interface

interface FastEthernet0/0
ip address dhcp
ip access-group Block_Stuff in
!
ip nat inside source static tcp LANIP 80 FastEthernet0/0 80 extendable
ip nat inside source static tcp LANIP 3389 FastEthernet0/0 3389 extendable
!
ip access-list extended Block_Stuff
permit tcp any WANBlock 0.0.0.7 eq 22
permit tcp host SpecifiedIP eq 3389 host FastEthernet0/0 eq 3389
deny tcp any any eq 22
deny tcp any any eq 3389
permit ip any any

This is an 1841 router

Joli Martinez — Wed, 07 Oct 2015 18:16:40 GMT

This is an 1841 router running 12.4(15)

Change this line -"permit tcp

Jon Marshall — Wed, 07 Oct 2015 18:46:59 GMT

Change this line -

"permit tcp host SpecifiedIP eq 3389 host FastEthernet0/0 eq 3389"

to this -

"permit tcp host SpecifiedIP host <public IP on interface> eq 3389"

Jon

That worked thanks,

Joli Martinez — Wed, 07 Oct 2015 20:13:16 GMT

That worked thanks,