Problem with my ACL, only HTTP and HTTPS allowed on vlan 10 but the webpage stays unreachable

[Searon]

Dear Cisco Community,

I am configuring this ACL to only have HTTP and HTTPS access to the server 10.0.0.2 on vlan 10, but I am doing something wrong as I am unable to reach the webpage anymore after I enable the ACL.

It's probably something small I am overlooking, any help is appreciated.

brussel(config)#ip access-list extended server
brussel(config-ext-nacl)#permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.2 eq 80
brussel(config-ext-nacl)#permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.2 eq 443
brussel(config-ext-nacl)#deny ip any host 10.0.0.2
brussel(config-ext-nacl)#int g0/1
brussel(config-if)#ip access-group server in

[balaji.bandi]

what is the out come  removing  "deny ip any host 10.0.0.2" and try ?

[Searon]

Weird, still not able to reach the page the moment I remove the total ACL I get instant webpage...

Does that mean this is wrong?

brussel(config-ext-nacl)#permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.2 eq 80

brussel(config-ext-nacl)#permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.2 eq 443

[Mohammed al Baqari · Accepted solution]

Hi,

You are applying the ACL on the wrong interface/direction. According to
your ACL syntax, it should be applied on G0/0 in inbound direction or G0/1
in outbound direction. Applying it on G0/1 in inbound direction is wrong.

**** please remember to rate useful posts

[Searon]

Yep, this was the problem. Something to remember, thanks for your help!

[balaji.bandi]

Good catch it was the wrong interface.