ACL to Access Similar Ports from Different Networks

[indraadi82]

Hi,

I need to allow few public IPs (example: 116.x.x.x, 116.x.x.y) to access my VM on 117.x.x.x with all ports accessible, BUT, at the same time, allow other IPs than those mentioned before to access my VM ONLY to its port 80 and 443 (other ports are not accessible).

Is this possible? 

Thanks! 

[Dennis Mink]

Yes this is possible.

define your public IP's to all ports on your VM first

then define the specifc public IPs on port 80 and 443

[Florin Barhala]

First of all are you using NAT?
So take care of NAT and map the required ports to a public IP.
Then an access-list on outside direction in should allow
src: 116.x.x.x, 116.x.x.y dst: VM_NAT_public_IP service: any
src: any dst: VM_NAT_public_IP service: http&https