ACL / Group policy for an 877

androidsnetwork · ‎04-20-2016

Hi, I have an 877 with a primary static IP and an additional /30 subnet

I have been trying to get an internal IP - based on external IP groups, ad certain ports to be accessible on one of the /30 IPs

The internal IP (192.168.5.3) is natted to the public IP and shows a public IP, eg 200.200.200.2

Anywhere I should be looking?

androidsnetwork · ‎04-22-2016

Its all good,

I have figured it out.

The following page explained some of the answer, the other half was to use the second vlan.

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-2mt/sec-object-group-acl.html