topic Re: ACL allow port range - ASA 5505 in Network Security https://community.cisco.com/t5/network-security/acl-allow-port-range-asa-5505/m-p/1151704#M876056 <HTML><HEAD></HEAD><BODY><P>For all tcp ports just do...</P><P></P><P>access-list dmz_access_in extended permit tcp host WEB host EXT-WEB</P><P></P><P>or all udp ports...</P><P></P><P>access-list dmz_access_in extended permit udp host WEB host EXT-WEB</P><P></P><P>or both</P><P></P><P>access-list dmz_access_in extended permit ip host WEB host EXT-WEB</P></BODY></HTML> Fri, 20 Feb 2009 17:43:05 GMT acomiskey 2009-02-20T17:43:05Z ACL allow port range - ASA 5505 https://community.cisco.com/t5/network-security/acl-allow-port-range-asa-5505/m-p/1151701#M876053 <P>Is there a command to allow a range of ports or all ports to pass through? I can allow individual ports with an eq statement (eq smtp, eq 3389, etc.), but I need to allow a wide range (or all)from one specific IP address through to one specific server. Thanks.</P> Mon, 11 Mar 2019 14:53:47 GMT https://community.cisco.com/t5/network-security/acl-allow-port-range-asa-5505/m-p/1151701#M876053 jdrose_2 2019-03-11T14:53:47Z Re: ACL allow port range - ASA 5505 https://community.cisco.com/t5/network-security/acl-allow-port-range-asa-5505/m-p/1151702#M876054 <HTML><HEAD></HEAD><BODY><P>yes, you can use the range command. </P><P></P><P>eg:</P><P></P><P>access-list dmz_access_in extended permit tcp host WEB host EXT-WEB range 8500 9000</P></BODY></HTML> Thu, 19 Feb 2009 23:44:04 GMT https://community.cisco.com/t5/network-security/acl-allow-port-range-asa-5505/m-p/1151702#M876054 philiechang 2009-02-19T23:44:04Z Re: ACL allow port range - ASA 5505 https://community.cisco.com/t5/network-security/acl-allow-port-range-asa-5505/m-p/1151703#M876055 <HTML><HEAD></HEAD><BODY><P>Thanks! Just curious - is there a command to allow all ports or do you just need to expand the range to incluse all?</P></BODY></HTML> Fri, 20 Feb 2009 13:52:26 GMT https://community.cisco.com/t5/network-security/acl-allow-port-range-asa-5505/m-p/1151703#M876055 jdrose_2 2009-02-20T13:52:26Z Re: ACL allow port range - ASA 5505 https://community.cisco.com/t5/network-security/acl-allow-port-range-asa-5505/m-p/1151704#M876056 <HTML><HEAD></HEAD><BODY><P>For all tcp ports just do...</P><P></P><P>access-list dmz_access_in extended permit tcp host WEB host EXT-WEB</P><P></P><P>or all udp ports...</P><P></P><P>access-list dmz_access_in extended permit udp host WEB host EXT-WEB</P><P></P><P>or both</P><P></P><P>access-list dmz_access_in extended permit ip host WEB host EXT-WEB</P></BODY></HTML> Fri, 20 Feb 2009 17:43:05 GMT https://community.cisco.com/t5/network-security/acl-allow-port-range-asa-5505/m-p/1151704#M876056 acomiskey 2009-02-20T17:43:05Z