Hello, I am trying to deifne an access control list to permit traffic from all internal (172,16.0.0/16) addressess, and deny all other traffic.
I have created the following:
access-list 1 permit 172.16.0.0 0.0.255.255
access-list 1 deny any
and applied it to the outgoing interface of the router:
interface FastEthernet0/0
ip address 10.0.0.1 255.0.0.0
ip access-group 1 out
ip nat outside
duplex auto
speed auto
However traffic from the networks: 172.16.4.0, 172.16.3.252, 172.16.255.252 and 172.16.255.248 cannot pass.
Have I done something incorrect here ?
Thanks for any help.