cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
422
Views
0
Helpful
5
Replies

ACL is not working

Mordecalex
Beginner
Beginner

Hi, i want to disallow vlan 10 and 30 addresses on request my web server with ACL on my router msa (rt_msa on my topology) but it is not working, it still successfully request my web server.

here is a little bit what i did on rt_msa:

access-list 110 deny tcp 172.130.128.0 0.0.0.63 host 10.0.0.2 eq 80

access-list 110 deny tcp 172.130.129.32 0.0.0.31 host 10.0.0.2 eq 80

access-list 110 permit tcp 172.130.129.0 0.0.0.31 host 10.0.0.2 eq 80

int g0/1

ip access-group 110 in

 

Any help? am i doing somthing wrong?

5 Replies 5

Shambhu-Kumar
Cisco Employee
Cisco Employee

Cold you try this way,

access-list 110 permit tcp 172.130.129.0 0.0.0.31 host 10.0.0.2 eq 80 

access-list 110 deny tcp any any eq 80

int g0/1
ip access-group 110 in

 

I did and still not working

Hi, i want to disallow vlan 10 and 30 addresses on request my web server with ACL on my router msa (rt_msa on my topology) but it is not working, it still successfully request my web server.

here is a little bit what i did on rt_msa:

access-list 110 deny tcp 172.130.128.0 0.0.0.63 host 10.0.0.2 eq 80

access-list 110 deny tcp 172.130.129.32 0.0.0.31 host 10.0.0.2 eq 80

access-list 110 permit tcp 172.130.129.0 0.0.0.31 host 10.0.0.2 eq 80

int g0/1

ip access-group 110 in

 

Any help? am i doing somthing wrong?

 

here is what i have done in PKT

try the command below. It's best to add the permit ACL at the top and the deny ACL at the bottom. In this case, only the permit ACL is required and deny all. 

access-list 110 permit tcp 172.130.129.0 0.0.0.31 host 10.0.0.2 eq 80
no access-list 110 deny tcp 172.130.128.0 0.0.0.63 host 10.0.0.2 eq 80
no access-list 110 deny tcp 172.130.129.32 0.0.0.31 host 10.0.0.2 eq 80
access-list 110 deny any any

 

MHM Cisco World
VIP Mentor VIP Mentor
VIP Mentor

I can not open PKT but please apply the ACL to SVI of vlan. 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers