10-02-2012 05:55 PM - edited 03-04-2019 05:44 PM
Hi Cisco community,
I'm looking for some help with configuring an ACL for a 857 Cisco router for web-server traffic.
I've configured a NAT for the inside network and added ACL entries for port 80 access but dont seem to have any luck accessing the website remotely. I suspect there's an ACL rule blocking access. Any help would be greatly appreciated, thanks in advance.
Setup
Internet === Router === Webserver
Router address: 10.0.10.1
Web-server address: 10.0.10.77
IP from ISP address: XXX.XXX.XXX.XXX
(masked for security)
10-02-2012 06:18 PM
I changed the ACL to the following and had success accessing the website.
access-list 100 permit tcp any any eq 80
However I'd like to only allow access to the web-server 10.0.10.77
10-02-2012 06:57 PM
hi,
add these lines on your 857:
ip nat inside source static udp 10.0.10.77 53 XXX.XXX.XXX.XXX 53
no access-list 100 deny 53 any any
access-list 100 permit udp any host 10.0.10.77 eq 53
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide