sl_def_acl Issues

[Xenos Dr]

I have a 1841 router on which I have setup the login options, as per below:

1841#sh login
     A default login delay of 1 seconds is applied.
     Quiet-Mode access list ACCESS_FROM_IT is applied.
     All successful login is logged.
     All failed login is logged.

     Router enabled to watch for login Attacks.
     If more than 5 login failures occur in 60 seconds or less,
     logins will be disabled for 300 seconds.

     Router presently in Normal-Mode.
     Current Watch Window
         Time remaining: 8 seconds.
         Login failures for current window: 0.
     Total login failures: 0.

1841#

My ACL is the below one:

Extended IP access list ACCESS_FROM_IT
    10 permit tcp host (myip1) any eq telnet log
    20 permit tcp host (myip2) any eq telnet log
    30 permit tcp host (myip1) any eq 22 log
    40 permit tcp host (myip2) any eq 22 log
    50 deny tcp any any eq telnet log
    60 deny tcp any any eq www log
    70 deny tcp any any eq 22 log

Despite that, when I try to telnet from my internal network, I cannot and from console I get:

May  4 09:51:19.132: %SEC-6-IPACCESSLOGP: list sl_def_acl denied tcp (myip1)(57796) -> 0.0.0.0(23), 1 packet

Any help on this?

[Georg Pauwen]

Hello,

telnet access is denied by the self-generated ACL, 'sl_def_acl', which doesn't really make sense since you specified your own quiet mode access list.

Which IOS version are you running ?

[Julio E. Moisa]

Hi

Could you please provide the following information:

show access-list 

and

can you verify the ACL added to the line vty, it should be included into the access-class <ACL> in so you can identify the ACL who is not allowing telnet access. 

line vty 0 15
access-class <ACL> in

Usually if you are using an ACL to allow the access to the device, a standard ACL is preferred to be applied to the virtual terminal (line vty), where you are applying the extended ACL?

:-)

[Richard Burts]

I agree that it would be very helpful to see the router configuration. Without seeing those details it is difficult to know what is going on.

HTH

Rick