topic Hi,Writing ac ACL would in Network Security

ACL

kakkouche — Tue, 12 Mar 2019 04:48:12 GMT

I want to write an acl that allows HTTP traffic to a single network 172.20.1.0

Thanks

Hi,Writing ac ACL would

Vibhor Amrodia — Sun, 05 Oct 2014 06:09:00 GMT

Hi,

Writing ac ACL would require these details:-

1) The traffic is moving from higher to Lower or Lower to Higher Security Interfaces ?

2) Access Group direction where the traffic needs to be blocked ?

Once , you have this you can use this syntax:-

access-list <name> permit <protocol> <Source Address/Subnet> <mask> <Destination Address/Subnet> <mask>

Refer:-

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/acl_overview.html

Thanks and Regards,

Vibhor Amrodia

If you are allowing access

Marius Gunnerud — Mon, 06 Oct 2014 07:39:43 GMT

If you are allowing access from the internet then the ACL would look like the following:

access-list ACLNAME permit tcp any host 172.20.1.0 eq http

access-group ACLNAME in interface <interface name>

Keep in mind that if you are allowing traffic in from the internet to a web server, you will also need to set up a NAT statement for this traffic as well.

Please remember to select a correct answer and rate helpful posts