Problem with ACL

[andrew005]

Help me with ACL. I wrote the following commands, but computers from the Internet can still connect to the MAIN BUILDING and FILLIA 1 FILLIA 2 computers.

[andrew005]

Project

[Flavio Miranda]

@andrew005 

  Did you apply the ACL to the right interface and right direction.? 

[Flavio Miranda]

@andrew005 

Here one ACL that might work.

!

access-list 100 permit icmp 33.33.33.0 0.0.0.255 any echo-reply

access-list 100 deny ip 33.33.33.0 0.0.0.255 any

access-list 100 permit ip any any

!

Apply this ACL on the router 8, direction IN

!

interface FastEthernet2/0

ip address 33.33.33.1 255.255.255.0

ip access-group 100 in

duplex auto

speed auto

!

Internet host will not ping anything but will allow ping from other networks.

[andrew005]

@Flavio Miranda, Look, I configured ACLs in MAIN BUILDING, but for some reason I can't access the PUBLIC server through a browser, although TCP packets for it reach it. Everything is configured to access the server through the external port of the router.

[Flavio Miranda]

From where to where exactly you can´t?

[andrew005]

From PC2 to Server3

[andrew005]

From PC22* to Server3 (PUBLIC in MAIN BUILDING)

[Flavio Miranda]

Test the file I sent to you

[andrew005]

Can you send me commands you write in?

[Flavio Miranda]

Sorry I dont recall and I did not take notes. Take the show running config fro my file and compare with yours. It will be different 

[Flavio Miranda]

I can access the server from PC 2.

Now, if you are trying to access the server using the Router´s IP address, you dont have NAT for this.

[Flavio Miranda · Accepted solution]

If you add NAT, you can access the server using the router´s IP address. Take a look on the file attached.

[andrew005]

Thank you!