cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Join Customer Connection to register!
23005
Views
20
Helpful
9
Replies
Highlighted
Beginner

Cisco 2921 Router with the ip http access class command

Hi,

the cisco 2921 Router has a default  ip hhtp  access class command  found  in it. Just  i  changed the default  IP to the new ip  i will use.

The Router is accessable  from the LAN only  but  not from the internet  configured the Public ip . I think this is due to the standard access list 23 .

Please advice  how will i access the Router from the Internet using the Public IP.

Thanks,

Saroj Pradhan

9 REPLIES 9
Highlighted
Engager

hi saroj,

please post your 'show run' output.

Highlighted
Beginner

The ACL used with the following command is used to restrict the GUI Access to router (like CCP) 
Also this ACL is the standard ACL, so will only match the source ip address not the destination.

ip http access-class 23

http://www.cisco.com/en/US/docs/ios/12_1/configfun/command/reference/frd1005.html#wp1020068

Check if the same ACL is applied in the vty lines -

line vty 0 4

access-class 23 in

Remove this command and check or put "permit any" at the end of ACL and check.

- HTH

  Rahul

Highlighted

As  i am unable  to access the Router from the internet due the ip http  access class command  need help to remove the command  from the routeer. please advice.

Thanks,

Saroj

Highlighted

Please attach your running confugration and let us via what means you are accessing the Router from Internet and the ip address of router (example - telnet, ssh, CCP etc)

ip http access-class is used to restrict the GUI access access of the router and if you just want to go ahead and remove this without any further troubleshooting, here is the command -

Router#conf t

Router(config)#no ip http access-class 23

- HTH

Rahul

Highlighted

Hi,

You don't have line vty access with ssh/telnet ?

Regards.

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.
Highlighted

hello,

Just a tip here, if you are going to be making changes on a remote router that you are not sure will result in disconnecting your session, save the config and use the reload command to reboot the device if the session disconnects:

(config)# reload in

Joel

_______________________________
Please rate helpful posts and answered questions!

Joel _______________________________ Please rate helpful posts and answered questions!
Highlighted

Hi,

if you are using internet, the first thing you must do is to ping the router

your router must have  default route to the internet

Highlighted

@joelgooding

good tip....!!

Highlighted
Beginner

Hello, please post the next commands:

 

sh run int "WAN Interface"

sh access-list

sh ip route

sh running-config | section line vty

 

Content for Community-Ad