acl

danielbj66 — Fri, 21 Feb 2020 13:09:02 GMT

Shouldnt this acl permit tftp from host 10.0.0.68, but deny any other tftp request? and also permit any other request other then tftp?

access-list 100 permit udp host 10.0.0.68 eq tftp host 10.0.0.82 eq tftp

access-list 100 deny udp any eq tftp any eq tftp

access-list 100 permit ip any any

Not really. There are a

Marvin Rhoads — Thu, 03 Apr 2014 15:02:54 GMT

Not really. There are a couple of flaws in your premises - Please refer to this thread for a better ACL setup.

Generally speakng tftp only uses udp/69 for the initial destination protocol and port. The initial source port is randomly chosen and that exchange also sets up the Transaction ID (TID) which influences the subsequent udp ports used for the actual transfer. See also this book excerpt for a more in-depth explanation:

topic Not really. There are a in Network Security

acl

Shouldnt this acl permit tftp from host 10.0.0.68, but deny any other tftp request? and also permit any other request other then tftp?access-list 100 permit udp host 10.0.0.68 eq tftp host 10.0.0.82 eq tftpaccess-list 100 deny udp any eq tftp any eq tftpaccess-list 100 permit ip any any

Not really. There are a

Shouldnt this acl permit tftp from host 10.0.0.68, but deny any other tftp request? and also permit any other request other then tftp?

access-list 100 permit udp host 10.0.0.68 eq tftp host 10.0.0.82 eq tftp

access-list 100 deny udp any eq tftp any eq tftp

access-list 100 permit ip any any