ACL config by Domain Address

[admin@atrinnet.net]

Hi Dear friend I wnat config extended ACL

For example permit yahoo.com

yahoo.com have many IPS

I want router ASR relove domain to all ips

i test with this

permit ip any yahoo.com

it resolve  to one ip top address of site yahoo than yahoo site have 4 IPS

How do this ???

Write ACL For domain addresses ????

[Richard Burts]

What platform are you asking about? I do not know of a way in router IOS to configure an extended ACL and specify a name and have it resolve for multiple addresses. If you are asking for some firewall type device with advanced security capabilities it might be possible.

HTH

Rick

[admin@atrinnet.net]

Hi

I want do this On ASR1002

[Richard Burts]

I do not know of a way to accomplish this on ASR1002. Perhaps someone else in the forum might have a suggestion?

HTH

Rick

[admin@atrinnet.net]

Hi someone have any solution For this ???

please help me

[sbhadrav@cisco.com]

asr1#conf t

asr1(config)#ip access-list extended 105

asr1(config-ext-nacl)# permit tcp host 172.X.X.X Y.Y.Y.Y 0 0.0.0.255

asr1(config-ext-nacl)#^Z

asr1#