Access control list

[smith606306]

       I need to set up an access list on our core switch so that one BMS server with IP address 10.123.234.1/24    can be accessed by all users on the 10.123.232.0/24  subnet.

interface Vlan370
description Meters VLAN 10.123.232.x
ip address 10.123.234.252 255.255.255.0
ip access-group METERS-IN in
no ip redirects
no ip unreachables
no ip proxy-arp

Extended IP access list METERS_IN
10 permit ip host 10.213.234.1 10.123.232.0 0.0.0.255 any

[shillings]

It's source address first, then destination address. Therefore, the addresses need swapping round.

[smith606306]

Extended IP access list METERS_IN

10 permit ip 10.123.232.0 0.0.0.255 host 10.213.234.1

[Richard Burts · Accepted solution]

Andrew

Shillings observation is correct that in an extended access list the order is source_address source_mask destination_address destination_mask. But since your access list is configured to be inbound on the VLAN where the server is located, then your original access list is correct and your revised access list would not work.

You have described what you want to achieve and you gave us a very partial config. But you do not tell us whether it is working or is not working. And you have not told us anything about the rest of the network environment.

If you want better answers from us then you need to give us more information.

HTH

Rick

[shillings]

Oops! Thanks Richard and appologies Andrew!

[smith606306]

It works fine Richard.

I was just getting my source/ destinations mixed up.