Enable only RDP,SMTP,POP and VPN traffic

[imranraheel]

Hi All;

I have a 871 router on which i want to implemet a firewall for my internal users so that all protocols are blocked except Remote Desktop SMTP POP & VPN so only clients who want to use the above protocols can access my local IP range is 192.168.1.0

[sachinraja]

hello Imran,

You can configure basic firewall features wit standard/extended access-lists on the 871 firewall.. in your case, u can allow ports 25, 110, UPD 500, UDP 4500 etc on ACL's and apply it on the ethernet interface of the router.. a default "deny any" on the ACL will prevent any other traffic hitting the router.. you can have a look at this URL for the sample config:

http://cisco.com/en/US/products/hw/routers/ps380/products_configuration_guide_chapter09186a008045d275.html

you can also configure CBAC if required on the 871 routers.

Hope this helps. all the best. rate replies if found useful..

Raj

[Fernando_Meza]

Agree with Raj, however the CBAC configuration is most suitable for traffic initiated from the inside. In your case the best option will be what Raj mentioned in the previous post regarding using access-list

[imranraheel]

thanks to both of you