cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
523
Views
0
Helpful
2
Replies

ACL Problem

harrisgirls
Level 1
Level 1

Hello Chaps,

I got a guest vlan 193 ... i put acl's on vlans before no worries when i  do it to this one if i put for example (extended rule deny ip  10.193.0.0 0.0.255.255 10.1.0.102 0.0.0.0.) 10.1.0.102 is a file server  it blocks the ping but also stops dns working :/ im confused !!

DNS for everything that is any external lookup's

the strange thing is the acl works but the DNS Stops .....

:/

even though the DNS is pointing externally and i have tried putting a permit all rule after the deny and still doesnt work ....

any help?

2 Replies 2

Jon Marshall
Hall of Fame
Hall of Fame

It will stop DNS, it will stop all IP traffic because you have a "deny ip ..." statements.

try -

deny icmp  10.193.0.0 0.0.255.255 10.1.0.102 0.0.0.0

Jon

jyoung
Level 1
Level 1

There is an implicit deny at the end of every acl. Are you adding permits for the traffic you need to get through?

Sent from Cisco Technical Support iPhone App