topic Allow/Block any type of services from Cisco ASA 5510 Extended Ac in Network Security https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979072#M401545 <HTML><HEAD></HEAD><BODY><P>Hi Madhav,</P><P></P><P></P><P>access-list inbound extended deny ip any host <IP address=""> . This statement blocks any traffic towards to that particular host.</IP></P><P></P><P>protocol IP includes tcp/udp/icmp.... so this will block everything.</P><P></P><P>But make sure that this rule should be on the top. So that deny traffic towards that host will work. If you place this rule in middle or last then if you have any permit rule for the entire segment or set that allows the access.</P><P></P><P></P><P>Please do rate if the given information helps.</P><P></P><P>By</P><P></P><P>Karthik</P></BODY></HTML> Fri, 27 Jul 2012 05:58:56 GMT nkarthikeyan 2012-07-27T05:58:56Z Allow/Block any type of services from Cisco ASA 5510 Extended Access List https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979071#M401544 <P>Hi,</P><P>&nbsp;&nbsp;&nbsp;&nbsp; I have created Different extended access-list which allow/block some specific services like IP,TCP,UDP ,ICMP etc for certain source and destination . But now I have to allow/Block all/any type of services to a certain host from a extended access-list . How can I do it ?</P> Mon, 11 Mar 2019 23:35:21 GMT https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979071#M401544 1madhavkarki 2019-03-11T23:35:21Z Allow/Block any type of services from Cisco ASA 5510 Extended Ac https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979072#M401545 <HTML><HEAD></HEAD><BODY><P>Hi Madhav,</P><P></P><P></P><P>access-list inbound extended deny ip any host <IP address=""> . This statement blocks any traffic towards to that particular host.</IP></P><P></P><P>protocol IP includes tcp/udp/icmp.... so this will block everything.</P><P></P><P>But make sure that this rule should be on the top. So that deny traffic towards that host will work. If you place this rule in middle or last then if you have any permit rule for the entire segment or set that allows the access.</P><P></P><P></P><P>Please do rate if the given information helps.</P><P></P><P>By</P><P></P><P>Karthik</P></BODY></HTML> Fri, 27 Jul 2012 05:58:56 GMT https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979072#M401545 nkarthikeyan 2012-07-27T05:58:56Z Allow/Block any type of services from Cisco ASA 5510 Extended Ac https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979073#M401546 <HTML><HEAD></HEAD><BODY><P>Thanks Karthik,</P><P> This information seems very helpful to me. I was confused that the Protocol IP is among one of the several list including </P><P>ah,&nbsp; eigrp,&nbsp; esp,&nbsp; gre,&nbsp; icmp,&nbsp; icmp6,&nbsp; igmp,&nbsp; igrp, <STRONG> ip</STRONG>,&nbsp; ipinip,&nbsp; ipsec ............ So specifying IP only in the access-list can allow/block all type of traffic or not. </P><P></P><P>Regards,</P><P>Madhav</P></BODY></HTML> Sun, 29 Jul 2012 05:10:12 GMT https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979073#M401546 1madhavkarki 2012-07-29T05:10:12Z Allow/Block any type of services from Cisco ASA 5510 Extended Ac https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979074#M401547 <HTML><HEAD></HEAD><BODY><P>Hi Madhav,</P><P></P><P>See the below table which will show the list of protocols which is considered as IP protocol. We have around 150 protocol id's under IP. So when you say IP deny any any this will block all the protocols whatever you have listed above.</P><P></P><TABLE><TBODY><TR><TH>Decimal</TH> <TH>Hex</TH> <TH>Keyword</TH> <TH>Protocol</TH> <TH>References</TH> </TR><TR><TD>0</TD><TD>0x00</TD><TD>HOPOPT</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=IPv6_Hop-by-Hop_Option&amp;action=edit&amp;redlink=1" title="IPv6 Hop-by-Hop Option (page does not exist)">IPv6 Hop-by-Hop Option</A></TD><TD><A href="http://tools.ietf.org/html/rfc2460">RFC 2460</A></TD></TR><TR><TD>1</TD><TD>0x01</TD><TD>ICMP</TD><TD><A href="http://en.wikipedia.org/wiki/Internet_Control_Message_Protocol" title="Internet Control Message Protocol">Internet Control Message Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc792">RFC 792</A></TD></TR><TR><TD>2</TD><TD>0x02</TD><TD>IGMP</TD><TD><A href="http://en.wikipedia.org/wiki/Internet_Group_Management_Protocol" title="Internet Group Management Protocol">Internet Group Management Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc1112">RFC 1112</A></TD></TR><TR><TD>3</TD><TD>0x03</TD><TD>GGP</TD><TD><A href="http://en.wikipedia.org/wiki/Gateway-to-Gateway_Protocol" title="Gateway-to-Gateway Protocol">Gateway-to-Gateway Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc823">RFC 823</A></TD></TR><TR><TD>4</TD><TD>0x04</TD><TD>IPv4</TD><TD><A href="http://en.wikipedia.org/wiki/IPv4" title="IPv4">IPv4</A> (encapsulation)</TD><TD><A href="http://tools.ietf.org/html/rfc791">RFC 791</A></TD></TR><TR><TD>5</TD><TD>0x05</TD><TD>ST</TD><TD><A href="http://en.wikipedia.org/wiki/Internet_Stream_Protocol" title="Internet Stream Protocol">Internet Stream Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc1190">RFC 1190</A>, <A href="http://tools.ietf.org/html/rfc1819">RFC 1819</A></TD></TR><TR><TD>6</TD><TD>0x06</TD><TD>TCP</TD><TD><A href="http://en.wikipedia.org/wiki/Transmission_Control_Protocol" title="Transmission Control Protocol">Transmission Control Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc793">RFC 793</A></TD></TR><TR><TD>7</TD><TD>0x07</TD><TD>CBT</TD><TD><A href="http://en.wikipedia.org/wiki/Core-based_trees" title="Core-based trees">Core-based trees</A></TD><TD><A href="http://tools.ietf.org/html/rfc2189">RFC 2189</A></TD></TR><TR><TD>8</TD><TD>0x08</TD><TD>EGP</TD><TD><A href="http://en.wikipedia.org/wiki/Exterior_Gateway_Protocol" title="Exterior Gateway Protocol">Exterior Gateway Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc888">RFC 888</A></TD></TR><TR><TD>9</TD><TD>0x09</TD><TD>IGP</TD><TD><A href="http://en.wikipedia.org/wiki/Interior_Gateway_Protocol" title="Interior Gateway Protocol">Interior Gateway Protocol</A> (any private interior gateway (used by Cisco for their IGRP))</TD><TD><BR /></TD></TR><TR><TD>10</TD><TD>0x0A</TD><TD>BBN-RCC-MON</TD><TD>BBN RCC Monitoring</TD><TD><BR /></TD></TR><TR><TD>11</TD><TD>0x0B</TD><TD>NVP-II</TD><TD><A href="http://en.wikipedia.org/wiki/Network_Voice_Protocol" title="Network Voice Protocol">Network Voice Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc741">RFC 741</A></TD></TR><TR><TD>12</TD><TD>0x0C</TD><TD>PUP</TD><TD><A href="http://en.wikipedia.org/wiki/PARC_Universal_Packet" title="PARC Universal Packet">Xerox PUP</A></TD><TD><BR /></TD></TR><TR><TD>13</TD><TD>0x0D</TD><TD>ARGUS</TD><TD>ARGUS</TD><TD><BR /></TD></TR><TR><TD>14</TD><TD>0x0E</TD><TD>EMCON</TD><TD>EMCON</TD><TD><BR /></TD></TR><TR><TD>15</TD><TD>0x0F</TD><TD>XNET</TD><TD>Cross Net Debugger</TD><TD>IEN 158</TD></TR><TR><TD>16</TD><TD>0x10</TD><TD>CHAOS</TD><TD>Chaos</TD><TD><BR /></TD></TR><TR><TD>17</TD><TD>0x11</TD><TD>UDP</TD><TD><A href="http://en.wikipedia.org/wiki/User_Datagram_Protocol" title="User Datagram Protocol">User Datagram Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc768">RFC 768</A></TD></TR><TR><TD>18</TD><TD>0x12</TD><TD>MUX</TD><TD><A href="http://en.wikipedia.org/wiki/Multiplexing" title="Multiplexing">Multiplexing</A></TD><TD>IEN 90</TD></TR><TR><TD>19</TD><TD>0x13</TD><TD>DCN-MEAS</TD><TD>DCN Measurement Subsystems</TD><TD><BR /></TD></TR><TR><TD>20</TD><TD>0x14</TD><TD>HMP</TD><TD><A href="http://en.wikipedia.org/wiki/Host_Monitoring_Protocol" title="Host Monitoring Protocol">Host Monitoring Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc869">RFC 869</A></TD></TR><TR><TD>21</TD><TD>0x15</TD><TD>PRM</TD><TD>Packet Radio Measurement</TD><TD><BR /></TD></TR><TR><TD>22</TD><TD>0x16</TD><TD>XNS-IDP</TD><TD>XEROX NS IDP</TD><TD><BR /></TD></TR><TR><TD>23</TD><TD>0x17</TD><TD>TRUNK-1</TD><TD>Trunk-1</TD><TD><BR /></TD></TR><TR><TD>24</TD><TD>0x18</TD><TD>TRUNK-2</TD><TD>Trunk-2</TD><TD><BR /></TD></TR><TR><TD>25</TD><TD>0x19</TD><TD>LEAF-1</TD><TD>Leaf-1</TD><TD><BR /></TD></TR><TR><TD>26</TD><TD>0x1A</TD><TD>LEAF-2</TD><TD>Leaf-2</TD><TD><BR /></TD></TR><TR><TD>27</TD><TD>0x1B</TD><TD>RDP</TD><TD><A href="http://en.wikipedia.org/wiki/Reliable_Datagram_Protocol" title="Reliable Datagram Protocol">Reliable Datagram Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc908">RFC 908</A></TD></TR><TR><TD>28</TD><TD>0x1C</TD><TD>IRTP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Internet_Reliable_Transaction_Protocol&amp;action=edit&amp;redlink=1" title="Internet Reliable Transaction Protocol (page does not exist)">Internet Reliable Transaction Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc938">RFC 938</A></TD></TR><TR><TD>29</TD><TD>0x1D</TD><TD>ISO-TP4</TD><TD>ISO Transport Protocol Class 4</TD><TD><A href="http://tools.ietf.org/html/rfc905">RFC 905</A></TD></TR><TR><TD>30</TD><TD>0x1E</TD><TD>NETBLT</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Bulk_Data_Transfer_Protocol&amp;action=edit&amp;redlink=1" title="Bulk Data Transfer Protocol (page does not exist)">Bulk Data Transfer Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc998">RFC 998</A></TD></TR><TR><TD>31</TD><TD>0x1F</TD><TD>MFE-NSP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=MFE_Network_Services_Protocol&amp;action=edit&amp;redlink=1" title="MFE Network Services Protocol (page does not exist)">MFE Network Services Protocol</A></TD><TD><BR /></TD></TR><TR><TD>32</TD><TD>0x20</TD><TD>MERIT-INP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=MERIT_Internodal_Protocol&amp;action=edit&amp;redlink=1" title="MERIT Internodal Protocol (page does not exist)">MERIT Internodal Protocol</A></TD><TD><BR /></TD></TR><TR><TD>33</TD><TD>0x21</TD><TD>DCCP</TD><TD><A href="http://en.wikipedia.org/wiki/Datagram_Congestion_Control_Protocol" title="Datagram Congestion Control Protocol">Datagram Congestion Control Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc4340">RFC 4340</A></TD></TR><TR><TD>34</TD><TD>0x22</TD><TD>3PC</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Third_Party_Connect_Protocol&amp;action=edit&amp;redlink=1" title="Third Party Connect Protocol (page does not exist)">Third Party Connect Protocol</A></TD><TD><BR /></TD></TR><TR><TD>35</TD><TD>0x23</TD><TD>IDPR</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Inter-Domain_Policy_Routing_Protocol&amp;action=edit&amp;redlink=1" title="Inter-Domain Policy Routing Protocol (page does not exist)">Inter-Domain Policy Routing Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc1479">RFC 1479</A></TD></TR><TR><TD>36</TD><TD>0x24</TD><TD>XTP</TD><TD><A href="http://en.wikipedia.org/wiki/Xpress_Transport_Protocol" title="Xpress Transport Protocol">Xpress Transport Protocol</A></TD><TD><BR /></TD></TR><TR><TD>37</TD><TD>0x25</TD><TD>DDP</TD><TD><A href="http://en.wikipedia.org/wiki/Datagram_Delivery_Protocol" title="Datagram Delivery Protocol">Datagram Delivery Protocol</A></TD><TD><BR /></TD></TR><TR><TD>38</TD><TD>0x26</TD><TD>IDPR-CMTP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=IDPR_Control_Message_Transport_Protocol&amp;action=edit&amp;redlink=1" title="IDPR Control Message Transport Protocol (page does not exist)">IDPR Control Message Transport Protocol</A></TD><TD><BR /></TD></TR><TR><TD>39</TD><TD>0x27</TD><TD>TP++</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=TP%2B%2B_Transport_Protocol&amp;action=edit&amp;redlink=1" title="TP++ Transport Protocol (page does not exist)">TP++ Transport Protocol</A></TD><TD><BR /></TD></TR><TR><TD>40</TD><TD>0x28</TD><TD>IL</TD><TD><A href="http://en.wikipedia.org/wiki/IL_%28network_protocol%29" title="IL (network protocol)">IL Transport Protocol</A></TD><TD><BR /></TD></TR><TR><TD>41</TD><TD>0x29</TD><TD>IPv6</TD><TD><A href="http://en.wikipedia.org/wiki/IPv6" title="IPv6">IPv6</A> (encapsulation)</TD><TD><A href="http://tools.ietf.org/html/rfc2473">RFC 2473</A>, <A href="http://tools.ietf.org/html/rfc3056">RFC 3056</A></TD></TR><TR><TD>42</TD><TD>0x2A</TD><TD>SDRP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Source_Demand_Routing_Protocol&amp;action=edit&amp;redlink=1" title="Source Demand Routing Protocol (page does not exist)">Source Demand Routing Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc1940">RFC 1940</A></TD></TR><TR><TD>43</TD><TD>0x2B</TD><TD>IPv6-Route</TD><TD>Routing Header for <A href="http://en.wikipedia.org/wiki/IPv6" title="IPv6">IPv6</A></TD><TD><A href="http://tools.ietf.org/html/rfc2460">RFC 2460</A></TD></TR><TR><TD>44</TD><TD>0x2C</TD><TD>IPv6-Frag</TD><TD>Fragment Header for <A href="http://en.wikipedia.org/wiki/IPv6" title="IPv6">IPv6</A></TD><TD><A href="http://tools.ietf.org/html/rfc2460">RFC 2460</A></TD></TR><TR><TD>45</TD><TD>0x2D</TD><TD>IDRP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Inter-Domain_Routing_Protocol&amp;action=edit&amp;redlink=1" title="Inter-Domain Routing Protocol (page does not exist)">Inter-Domain Routing Protocol</A></TD><TD><BR /></TD></TR><TR><TD>46</TD><TD>0x2E</TD><TD>RSVP</TD><TD><A href="http://en.wikipedia.org/wiki/Resource_Reservation_Protocol" title="Resource Reservation Protocol">Resource Reservation Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc2205">RFC 2205</A></TD></TR><TR><TD>47</TD><TD>0x2F</TD><TD>GRE</TD><TD><A href="http://en.wikipedia.org/wiki/Generic_Routing_Encapsulation" title="Generic Routing Encapsulation">Generic Routing Encapsulation</A></TD><TD><A href="http://tools.ietf.org/html/rfc2784">RFC 2784</A>, <A href="http://tools.ietf.org/html/rfc2890">RFC 2890</A></TD></TR><TR><TD>48</TD><TD>0x30</TD><TD>MHRP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Mobile_Host_Routing_Protocol&amp;action=edit&amp;redlink=1" title="Mobile Host Routing Protocol (page does not exist)">Mobile Host Routing Protocol</A></TD><TD><BR /></TD></TR><TR><TD>49</TD><TD>0x31</TD><TD>BNA</TD><TD>BNA</TD><TD><BR /></TD></TR><TR><TD>50</TD><TD>0x32</TD><TD>ESP</TD><TD><A href="http://en.wikipedia.org/wiki/Encapsulating_Security_Payload" title="Encapsulating Security Payload">Encapsulating Security Payload</A></TD><TD><A href="http://tools.ietf.org/html/rfc4303">RFC 4303</A></TD></TR><TR><TD>51</TD><TD>0x33</TD><TD>AH</TD><TD><A href="http://en.wikipedia.org/wiki/Authentication_Header" title="Authentication Header">Authentication Header</A></TD><TD><A href="http://tools.ietf.org/html/rfc4302">RFC 4302</A></TD></TR><TR><TD>52</TD><TD>0x34</TD><TD>I-NLSP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Integrated_Net_Layer_Security_Protocol&amp;action=edit&amp;redlink=1" title="Integrated Net Layer Security Protocol (page does not exist)">Integrated Net Layer Security Protocol</A></TD><TD>TUBA</TD></TR><TR><TD>53</TD><TD>0x35</TD><TD>SWIPE</TD><TD><A href="http://en.wikipedia.org/wiki/SwIPe_%28protocol%29" title="SwIPe (protocol)">SwIPe</A></TD><TD>IP with Encryption</TD></TR><TR><TD>54</TD><TD>0x36</TD><TD>NARP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=NBMA_Address_Resolution_Protocol&amp;action=edit&amp;redlink=1" title="NBMA Address Resolution Protocol (page does not exist)">NBMA Address Resolution Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc1735">RFC 1735</A></TD></TR><TR><TD>55</TD><TD>0x37</TD><TD>MOBILE</TD><TD><A href="http://en.wikipedia.org/wiki/Mobile_IP" title="Mobile IP">IP Mobility</A> (Min Encap)</TD><TD><A href="http://tools.ietf.org/html/rfc2004">RFC 2004</A></TD></TR><TR><TD>56</TD><TD>0x38</TD><TD>TLSP</TD><TD><A href="http://en.wikipedia.org/wiki/Transport_Layer_Security_Protocol" title="Transport Layer Security Protocol">Transport Layer Security Protocol</A> (using Kryptonet key management)</TD><TD><BR /></TD></TR><TR><TD>57</TD><TD>0x39</TD><TD>SKIP</TD><TD><A href="http://en.wikipedia.org/wiki/Simple_Key-Management_for_Internet_Protocol" title="Simple Key-Management for Internet Protocol">Simple Key-Management for Internet Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc2356">RFC 2356</A></TD></TR><TR><TD>58</TD><TD>0x3A</TD><TD>IPv6-ICMP</TD><TD><A href="http://en.wikipedia.org/wiki/ICMPv6" title="ICMPv6">ICMP for IPv6</A></TD><TD><A href="http://tools.ietf.org/html/rfc4443">RFC 4443</A>, <A href="http://tools.ietf.org/html/rfc4884">RFC 4884</A></TD></TR><TR><TD>59</TD><TD>0x3B</TD><TD>IPv6-NoNxt</TD><TD>No Next Header for <A href="http://en.wikipedia.org/wiki/IPv6" title="IPv6">IPv6</A></TD><TD><A href="http://tools.ietf.org/html/rfc2460">RFC 2460</A></TD></TR><TR><TD>60</TD><TD>0x3C</TD><TD>IPv6-Opts</TD><TD>Destination Options for <A href="http://en.wikipedia.org/wiki/IPv6" title="IPv6">IPv6</A></TD><TD><A href="http://tools.ietf.org/html/rfc2460">RFC 2460</A></TD></TR><TR><TD>61</TD><TD>0x3D</TD><TD><BR /></TD><TD>Any host internal protocol</TD><TD><BR /></TD></TR><TR><TD>62</TD><TD>0x3E</TD><TD>CFTP</TD><TD>CFTP</TD><TD><BR /></TD></TR><TR><TD>63</TD><TD>0x3F</TD><TD><BR /></TD><TD>Any local network</TD><TD><BR /></TD></TR><TR><TD>64</TD><TD>0x40</TD><TD>SAT-EXPAK</TD><TD>SATNET and Backroom EXPAK</TD><TD><BR /></TD></TR><TR><TD>65</TD><TD>0x41</TD><TD>KRYPTOLAN</TD><TD>Kryptolan</TD><TD><BR /></TD></TR><TR><TD>66</TD><TD>0x42</TD><TD>RVD</TD><TD>MIT <A href="http://en.wikipedia.org/w/index.php?title=Remote_Virtual_Disk_Protocol&amp;action=edit&amp;redlink=1" title="Remote Virtual Disk Protocol (page does not exist)">Remote Virtual Disk Protocol</A></TD><TD><BR /></TD></TR><TR><TD>67</TD><TD>0x43</TD><TD>IPPC</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Internet_Pluribus_Packet_Core&amp;action=edit&amp;redlink=1" title="Internet Pluribus Packet Core (page does not exist)">Internet Pluribus Packet Core</A></TD><TD><BR /></TD></TR><TR><TD>68</TD><TD>0x44</TD><TD><BR /></TD><TD>Any distributed file system</TD><TD><BR /></TD></TR><TR><TD>69</TD><TD>0x45</TD><TD>SAT-MON</TD><TD>SATNET Monitoring</TD><TD><BR /></TD></TR><TR><TD>70</TD><TD>0x46</TD><TD>VISA</TD><TD>VISA Protocol</TD><TD><BR /></TD></TR><TR><TD>71</TD><TD>0x47</TD><TD>IPCV</TD><TD>Internet Packet Core Utility</TD><TD><BR /></TD></TR><TR><TD>72</TD><TD>0x48</TD><TD>CPNX</TD><TD>Computer Protocol Network Executive</TD><TD><BR /></TD></TR><TR><TD>73</TD><TD>0x49</TD><TD>CPHB</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Computer_Protocol_Heart_Beat&amp;action=edit&amp;redlink=1" title="Computer Protocol Heart Beat (page does not exist)">Computer Protocol Heart Beat</A></TD><TD><BR /></TD></TR><TR><TD>74</TD><TD>0x4A</TD><TD>WSN</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Wang_Span_Network&amp;action=edit&amp;redlink=1" title="Wang Span Network (page does not exist)">Wang Span Network</A></TD><TD><BR /></TD></TR><TR><TD>75</TD><TD>0x4B</TD><TD>PVP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Packet_Video_Protocol&amp;action=edit&amp;redlink=1" title="Packet Video Protocol (page does not exist)">Packet Video Protocol</A></TD><TD><BR /></TD></TR><TR><TD>76</TD><TD>0x4C</TD><TD>BR-SAT-MON</TD><TD>Backroom SATNET Monitoring</TD><TD><BR /></TD></TR><TR><TD>77</TD><TD>0x4D</TD><TD>SUN-ND</TD><TD>SUN ND PROTOCOL-Temporary</TD><TD><BR /></TD></TR><TR><TD>78</TD><TD>0x4E</TD><TD>WB-MON</TD><TD>WIDEBAND Monitoring</TD><TD><BR /></TD></TR><TR><TD>79</TD><TD>0x4F</TD><TD>WB-EXPAK</TD><TD>WIDEBAND EXPAK</TD><TD><BR /></TD></TR><TR><TD>80</TD><TD>0x50</TD><TD>ISO-IP</TD><TD>International Organization for Standardization Internet Protocol</TD><TD><BR /></TD></TR><TR><TD>81</TD><TD>0x51</TD><TD>VMTP</TD><TD><A href="http://en.wikipedia.org/wiki/V_%28operating_system%29" title="V (operating system)">Versatile Message Transaction Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc1045">RFC 1045</A></TD></TR><TR><TD>82</TD><TD>0x52</TD><TD>SECURE-VMTP</TD><TD>Secure Versatile Message Transaction Protocol</TD><TD><A href="http://tools.ietf.org/html/rfc1045">RFC 1045</A></TD></TR><TR><TD>83</TD><TD>0x53</TD><TD>VINES</TD><TD>VINES</TD><TD><BR /></TD></TR><TR><TD>84</TD><TD>0x54</TD><TD>TTP</TD><TD>TTP</TD><TD><BR /></TD></TR><TR><TD>84</TD><TD>0x54</TD><TD>IPTM</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Internet_Protocol_Traffic_Manager&amp;action=edit&amp;redlink=1" title="Internet Protocol Traffic Manager (page does not exist)">Internet Protocol Traffic Manager</A></TD><TD><BR /></TD></TR><TR><TD>85</TD><TD>0x55</TD><TD>NSFNET-IGP</TD><TD>NSFNET-IGP</TD><TD><BR /></TD></TR><TR><TD>86</TD><TD>0x56</TD><TD>DGP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Dissimilar_Gateway_Protocol&amp;action=edit&amp;redlink=1" title="Dissimilar Gateway Protocol (page does not exist)">Dissimilar Gateway Protocol</A></TD><TD><BR /></TD></TR><TR><TD>87</TD><TD>0x57</TD><TD>TCF</TD><TD>TCF</TD><TD><BR /></TD></TR><TR><TD>88</TD><TD>0x58</TD><TD>EIGRP</TD><TD><A href="http://en.wikipedia.org/wiki/EIGRP" title="EIGRP">EIGRP</A></TD><TD><BR /></TD></TR><TR><TD>89</TD><TD>0x59</TD><TD>OSPF</TD><TD><A href="http://en.wikipedia.org/wiki/Open_Shortest_Path_First" title="Open Shortest Path First">Open Shortest Path First</A></TD><TD><A href="http://tools.ietf.org/html/rfc1583">RFC 1583</A></TD></TR><TR><TD>90</TD><TD>0x5A</TD><TD>Sprite-RPC</TD><TD>Sprite RPC Protocol</TD><TD><BR /></TD></TR><TR><TD>91</TD><TD>0x5B</TD><TD>LARP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Locus_Address_Resolution_Protocol&amp;action=edit&amp;redlink=1" title="Locus Address Resolution Protocol (page does not exist)">Locus Address Resolution Protocol</A></TD><TD><BR /></TD></TR><TR><TD>92</TD><TD>0x5C</TD><TD>MTP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Multicast_Transport_Protocol&amp;action=edit&amp;redlink=1" title="Multicast Transport Protocol (page does not exist)">Multicast Transport Protocol</A></TD><TD><BR /></TD></TR><TR><TD>93</TD><TD>0x5D</TD><TD>AX.25</TD><TD><A href="http://en.wikipedia.org/wiki/AX.25" title="AX.25">AX.25</A></TD><TD><BR /></TD></TR><TR><TD>94</TD><TD>0x5E</TD><TD>IPIP</TD><TD><A href="http://en.wikipedia.org/wiki/IP_in_IP" title="IP in IP">IP-within-IP Encapsulation Protocol</A></TD><TD><BR /></TD></TR><TR><TD>95</TD><TD>0x5F</TD><TD>MICP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Mobile_Internetworking_Control_Protocol&amp;action=edit&amp;redlink=1" title="Mobile Internetworking Control Protocol (page does not exist)">Mobile Internetworking Control Protocol</A></TD><TD><BR /></TD></TR><TR><TD>96</TD><TD>0x60</TD><TD>SCC-SP</TD><TD>Semaphore Communications Sec. Pro</TD><TD><BR /></TD></TR><TR><TD>97</TD><TD>0x61</TD><TD>ETHERIP</TD><TD>Ethernet-within-IP Encapsulation</TD><TD><A href="http://tools.ietf.org/html/rfc3378">RFC 3378</A></TD></TR><TR><TD>98</TD><TD>0x62</TD><TD>ENCAP</TD><TD>Encapsulation Header</TD><TD><A href="http://tools.ietf.org/html/rfc1241">RFC 1241</A></TD></TR><TR><TD>99</TD><TD>0x63</TD><TD><BR /></TD><TD>Any private encryption scheme</TD><TD><BR /></TD></TR><TR><TD>100</TD><TD>0x64</TD><TD>GMTP</TD><TD>GMTP</TD><TD><BR /></TD></TR><TR><TD>101</TD><TD>0x65</TD><TD>IFMP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Ipsilon_Flow_Management_Protocol&amp;action=edit&amp;redlink=1" title="Ipsilon Flow Management Protocol (page does not exist)">Ipsilon Flow Management Protocol</A></TD><TD><BR /></TD></TR><TR><TD>102</TD><TD>0x66</TD><TD>PNNI</TD><TD>PNNI over IP</TD><TD><BR /></TD></TR><TR><TD>103</TD><TD>0x67</TD><TD>PIM</TD><TD><A href="http://en.wikipedia.org/wiki/Protocol_Independent_Multicast" title="Protocol Independent Multicast">Protocol Independent Multicast</A></TD><TD><BR /></TD></TR><TR><TD>104</TD><TD>0x68</TD><TD>ARIS</TD><TD>IBM's ARIS (Aggregate Route IP Switching) Protocol</TD><TD><BR /></TD></TR><TR><TD>105</TD><TD>0x69</TD><TD>SCPS</TD><TD><A href="http://scps.org" rel="nofollow">SCPS (Space Communications Protocol Standards)</A></TD><TD>SCPS-TP<SUP id="cite_ref-0"><A href="http://en.wikipedia.org/wiki/List_of_IP_protocol_numbers#cite_note-0">[1]</A></SUP></TD></TR><TR><TD>106</TD><TD>0x6A</TD><TD>QNX</TD><TD>QNX</TD><TD><BR /></TD></TR><TR><TD>107</TD><TD>0x6B</TD><TD>A/N</TD><TD>Active Networks</TD><TD><BR /></TD></TR><TR><TD>108</TD><TD>0x6C</TD><TD>IPComp</TD><TD><A href="http://en.wikipedia.org/wiki/IP_Payload_Compression_Protocol" title="IP Payload Compression Protocol">IP Payload Compression Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc3173">RFC 3173</A></TD></TR><TR><TD>109</TD><TD>0x6D</TD><TD>SNP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Sitara_Networks_Protocol&amp;action=edit&amp;redlink=1" title="Sitara Networks Protocol (page does not exist)">Sitara Networks Protocol</A></TD><TD><BR /></TD></TR><TR><TD>110</TD><TD>0x6E</TD><TD>Compaq-Peer</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Compaq_Peer_Protocol&amp;action=edit&amp;redlink=1" title="Compaq Peer Protocol (page does not exist)">Compaq Peer Protocol</A></TD><TD><BR /></TD></TR><TR><TD>111</TD><TD>0x6F</TD><TD>IPX-in-IP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=IPX_in_IP&amp;action=edit&amp;redlink=1" title="IPX in IP (page does not exist)">IPX in IP</A></TD><TD><BR /></TD></TR><TR><TD>112</TD><TD>0x70</TD><TD>VRRP</TD><TD><A href="http://en.wikipedia.org/wiki/Virtual_Router_Redundancy_Protocol" title="Virtual Router Redundancy Protocol">Virtual Router Redundancy Protocol</A>, <A href="http://en.wikipedia.org/wiki/Common_Address_Redundancy_Protocol" title="Common Address Redundancy Protocol">Common Address Redundancy Protocol</A> (not <A href="http://en.wikipedia.org/wiki/Internet_Assigned_Numbers_Authority" title="Internet Assigned Numbers Authority">IANA</A> assigned)</TD><TD>VRRP:<A href="http://tools.ietf.org/html/rfc3768">RFC 3768</A></TD></TR><TR><TD>113</TD><TD>0x71</TD><TD>PGM</TD><TD><A href="http://en.wikipedia.org/wiki/Pragmatic_General_Multicast" title="Pragmatic General Multicast">PGM Reliable Transport Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc3208">RFC 3208</A></TD></TR><TR><TD>114</TD><TD>0x72</TD><TD><BR /></TD><TD>Any 0-hop protocol</TD><TD><BR /></TD></TR><TR><TD>115</TD><TD>0x73</TD><TD>L2TP</TD><TD><A href="http://en.wikipedia.org/wiki/L2TPv3" title="L2TPv3">Layer Two Tunneling Protocol Version 3</A></TD><TD><A href="http://tools.ietf.org/html/rfc3931">RFC 3931</A></TD></TR><TR><TD>116</TD><TD>0x74</TD><TD>DDX</TD><TD>D-II Data Exchange (DDX)</TD><TD><BR /></TD></TR><TR><TD>117</TD><TD>0x75</TD><TD>IATP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Interactive_Agent_Transfer_Protocol&amp;action=edit&amp;redlink=1" title="Interactive Agent Transfer Protocol (page does not exist)">Interactive Agent Transfer Protocol</A></TD><TD><BR /></TD></TR><TR><TD>118</TD><TD>0x76</TD><TD>STP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Schedule_Transfer_Protocol&amp;action=edit&amp;redlink=1" title="Schedule Transfer Protocol (page does not exist)">Schedule Transfer Protocol</A></TD><TD><BR /></TD></TR><TR><TD>119</TD><TD>0x77</TD><TD>SRP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=SpectraLink_Radio_Protocol&amp;action=edit&amp;redlink=1" title="SpectraLink Radio Protocol (page does not exist)">SpectraLink Radio Protocol</A></TD><TD><BR /></TD></TR><TR><TD>120</TD><TD>0x78</TD><TD>UTI</TD><TD>UTI</TD><TD><BR /></TD></TR><TR><TD>121</TD><TD>0x79</TD><TD>SMP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Simple_Message_Protocol&amp;action=edit&amp;redlink=1" title="Simple Message Protocol (page does not exist)">Simple Message Protocol</A></TD><TD><BR /></TD></TR><TR><TD>122</TD><TD>0x7A</TD><TD>SM</TD><TD>SM</TD><TD><BR /></TD></TR><TR><TD>123</TD><TD>0x7B</TD><TD>PTP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Performance_Transparency_Protocol&amp;action=edit&amp;redlink=1" title="Performance Transparency Protocol (page does not exist)">Performance Transparency Protocol</A></TD><TD><BR /></TD></TR><TR><TD>124</TD><TD>0x7C</TD><TD><BR /></TD><TD><A href="http://en.wikipedia.org/wiki/IS-IS" title="IS-IS">IS-IS</A> over <A href="http://en.wikipedia.org/wiki/IPv4" title="IPv4">IPv4</A></TD><TD><BR /></TD></TR><TR><TD>125</TD><TD>0x7D</TD><TD>FIRE</TD><TD><BR /></TD><TD><BR /></TD></TR><TR><TD>126</TD><TD>0x7E</TD><TD>CRTP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Combat_Radio_Transport_Protocol&amp;action=edit&amp;redlink=1" title="Combat Radio Transport Protocol (page does not exist)">Combat Radio Transport Protocol</A></TD><TD><BR /></TD></TR><TR><TD>127</TD><TD>0x7F</TD><TD>CRUDP</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Combat_Radio_User_Datagram&amp;action=edit&amp;redlink=1" title="Combat Radio User Datagram (page does not exist)">Combat Radio User Datagram</A></TD><TD><BR /></TD></TR><TR><TD>128</TD><TD>0x80</TD><TD>SSCOPMCE</TD><TD><BR /></TD><TD><BR /></TD></TR><TR><TD>129</TD><TD>0x81</TD><TD>IPLT</TD><TD><BR /></TD><TD><BR /></TD></TR><TR><TD>130</TD><TD>0x82</TD><TD>SPS</TD><TD><A href="http://en.wikipedia.org/w/index.php?title=Secure_Packet_Shield&amp;action=edit&amp;redlink=1" title="Secure Packet Shield (page does not exist)">Secure Packet Shield</A></TD><TD><BR /></TD></TR><TR><TD>131</TD><TD>0x83</TD><TD>PIPE</TD><TD>Private IP Encapsulation within IP</TD><TD><A href="http://www.watersprings.org/pub/id/draft-petri-mobileip-pipe-00.txt" rel="nofollow">Expired I-D draft-petri-mobileip-pipe-00.txt</A></TD></TR><TR><TD>132</TD><TD>0x84</TD><TD>SCTP</TD><TD><A href="http://en.wikipedia.org/wiki/Stream_Control_Transmission_Protocol" title="Stream Control Transmission Protocol">Stream Control Transmission Protocol</A></TD><TD><BR /></TD></TR><TR><TD>133</TD><TD>0x85</TD><TD>FC</TD><TD><A href="http://en.wikipedia.org/wiki/Fibre_Channel" title="Fibre Channel">Fibre Channel</A></TD><TD><BR /></TD></TR><TR><TD>134</TD><TD>0x86</TD><TD><BR /></TD><TD>RSVP-E2E-IGNORE</TD><TD><A href="http://tools.ietf.org/html/rfc3175">RFC 3175</A></TD></TR><TR><TD>135</TD><TD>0x87</TD><TD><BR /></TD><TD>Mobility Header</TD><TD><A href="http://tools.ietf.org/html/rfc3775">RFC 3775</A></TD></TR><TR><TD>136</TD><TD>0x88</TD><TD><BR /></TD><TD><A href="http://en.wikipedia.org/wiki/UDP_Lite" title="UDP Lite">UDP Lite</A></TD><TD><A href="http://tools.ietf.org/html/rfc3828">RFC 3828</A></TD></TR><TR><TD>137</TD><TD>0x89</TD><TD><BR /></TD><TD><A href="http://en.wikipedia.org/wiki/Multiprotocol_Label_Switching" title="Multiprotocol Label Switching">MPLS</A>-in-IP</TD><TD><A href="http://tools.ietf.org/html/rfc4023">RFC 4023</A></TD></TR><TR><TD>138</TD><TD>0x8A</TD><TD>manet</TD><TD><A href="http://en.wikipedia.org/wiki/Mobile_ad-hoc_network" title="Mobile ad-hoc network">MANET</A> Protocols</TD><TD><A href="http://tools.ietf.org/html/rfc5498">RFC 5498</A></TD></TR><TR><TD>139</TD><TD>0x8B</TD><TD>HIP</TD><TD><A href="http://en.wikipedia.org/wiki/Host_Identity_Protocol" title="Host Identity Protocol">Host Identity Protocol</A></TD><TD><A href="http://tools.ietf.org/html/rfc5201">RFC 5201</A></TD></TR><TR><TD>140</TD><TD>0x8C</TD><TD>Shim6</TD><TD><A href="http://en.wikipedia.org/wiki/Site_Multihoming_by_IPv6_Intermediation" title="Site Multihoming by IPv6 Intermediation">Site Multihoming by IPv6 Intermediation</A></TD><TD><A href="http://tools.ietf.org/html/rfc5533">RFC 5533</A></TD></TR><TR><TD>141-252</TD><TD>0x8D-0xFC</TD><TD colspan="3">UNASSIGNED</TD></TR><TR><TD>253-254</TD><TD>0xFD-0xFE</TD><TD colspan="2">Use for experimentation and testing</TD><TD><A href="http://tools.ietf.org/html/rfc3692">RFC 3692</A></TD></TR><TR><TD>255</TD><TD>0xFF</TD><TD colspan="3">Reserved.</TD></TR></TBODY></TABLE><P></P><P></P><P>Please do rate if the given information helps.</P><P></P><P>By</P><P>Karthik</P></BODY></HTML> Sun, 29 Jul 2012 05:45:48 GMT https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979074#M401547 nkarthikeyan 2012-07-29T05:45:48Z Allow/Block any type of services from Cisco ASA 5510 Extended Ac https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979075#M401548 <HTML><HEAD></HEAD><BODY><P>Thanks Karthik,</P><P></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Now I am clear about the "ANY" services in Fortigate policy compared with IP in access-list in Cisco ASA 5510. Thank you very much.</P><P></P><P>Regards,</P><P>Madhav</P></BODY></HTML> Sun, 29 Jul 2012 09:14:12 GMT https://community.cisco.com/t5/network-security/allow-block-any-type-of-services-from-cisco-asa-5510-extended/m-p/1979075#M401548 1madhavkarki 2012-07-29T09:14:12Z