07-03-2017 06:26 AM - edited 03-08-2019 11:11 AM
Trying to add extended ACL to 881 router getting Incomplete command at the end. If I ? it just returns all the options I have already selected. At a loss to whats going on here is it a bug or am I missing something really obvious?
Router881(config-ext-nacl)#permit tcp 192.168.30.0 0.0.0.255 eq www
% Incomplete command.
Router881(config-ext-nacl)#permit tcp 192.168.30.0 0.0.0.255 eq www ?
<0-65535> Port number
A.B.C.D Destination address
any Any destination host
chargen Character generator (19)
cmd Remote commands (rcmd, 514)
daytime Daytime (13)
discard Discard (9)
domain Domain Name Service (53)
drip Dynamic Routing Information Protocol (3949)
echo Echo (7)
exec Exec (rsh, 512)
finger Finger (79)
ftp File Transfer Protocol (21)
ftp-data FTP data connections (20)
gopher Gopher (70)
host A single destination host
hostname NIC hostname server (101)
ident Ident Protocol (113)
irc Internet Relay Chat (194)
klogin Kerberos login (543)
kshell Kerberos shell (544)
login Login (rlogin, 513)
lpd Printer service (515)
nntp Network News Transport Protocol (119)
object-group Destination network object group
pim-auto-rp PIM Auto-RP (496)
pop2 Post Office Protocol v2 (109)
pop3 Post Office Protocol v3 (110)
smtp Simple Mail Transport Protocol (25)
sunrpc Sun Remote Procedure Call (111)
tacacs TAC Access Control System (49)
talk Talk (517)
telnet Telnet (23)
time Time (37)
uucp Unix-to-Unix Copy Program (540)
whois Nicname (43)
www World Wide Web (HTTP, 80)
Router881#sh ver
Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.1(3)T4, RELEASE SOFTWARE (fc1)
Solved! Go to Solution.
07-03-2017 06:30 AM
Hello!
Your forgot the destination, if you want to apply this filter to all destinations you have to ingress this command:
permit tcp 192.168.30.0 0.0.0.255 any eq www
You also can filter by network or host.
--Do not forget to rate useful answers---
Regards,
07-03-2017 06:30 AM
Hello!
Your forgot the destination, if you want to apply this filter to all destinations you have to ingress this command:
permit tcp 192.168.30.0 0.0.0.255 any eq www
You also can filter by network or host.
--Do not forget to rate useful answers---
Regards,
07-03-2017 06:40 AM
Hi Diana,
Thanks! Spend half an hour tabbing and ???? Just could not see it.....
Regards
Richard
07-03-2017 06:50 AM
Your welcome!
Have a good day! :)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide