06-09-2011 06:34 PM - edited 03-07-2019 12:44 AM
Hi,
Trying to allow traffic from Outside into a particular internal vlan but for some reason the traffic is getting denied !!
I can see the hits of the specific rule in the firewall on the outside interface but after this no traffic get through the vlan interface.. I have setup acls in the past on a particular vlan to access the internet internally going to outside fine, but going from outside to inside is still a problem.
Below image is the vlan interface l wont to access from outside !! The access-group "145 in" is working to allow hosts within this vlan access outside and other vlans. While the "146 out" access-group was supposedly setup to allow external hosts to access machines within this 415 Vlan ?? But it is not working ?? Any ideas
This image below shows the acl's associated with this Vlan Interface , hopefully someone can pick out the possible problem with either access-group. The problem is external traffic allowed into this vlan.. E.g Host 59.167.197.131 cannot connect to host 172.16.44.22 on http from outside ??
06-10-2011 12:29 AM
Hi,
Do this:
- show access-list 145 then
-ip access-list extended 145
xx permit tcp host 172.16.44.21 eq www host 59.167.197.131 where xxx is the number of the line just before the line with the domain keyword + 1
Regards.
Alain.
06-14-2011 11:25 PM
Thanks for the reply Alain, will give it a go and let you know if successful.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide