help creating ACL's

[Richard Langly]

I have a 5506-X running 9.4.1 and would like to ask for help on creating the following ACL's.

Thank you,

Service       Port                      Protocol  Direction  DNS

SIP+TLS    5061                     TCP         Out     
SRTP        10000 - 65534     UDP         Both     
STUN        3478 - 3479          UDP        Both           stun01.silentcircle.net ; stun02.silentcircle.net

[aydinnmu1]

Hi Richard,

this command may be helpful for you.

access-list NAME1 permit tcp any4 any4 eq 5061

access-list NAME1 permit udp any4 any4 range 10000 65534 

access-list NAME1 permit udp any4 any4 range 3478 3479

access-list NAME2 permit udp any4 range 10000 65534 any4

access-list NAME2 permit udp any4 range 3478 3479 any4

access-group NAME1 interface OUTSIDE in

access-group NAME2 interface INSIDE in

LOCAL---------inside_int-OO-outside_int----------INTERNET

You can change any4 with your ip range. any4 statement refer to ipv4 addressses.

Best regards.