Guys I am not an expert on Networking but here i am trying to configure a Cisco router .. to connect two devices...
I am trying to understand the concept of access list...
Here is part of my config file:
interface vlan 101
description abc SVI 101
ip address 192.168.30.53 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip directed-broadcast
load-interval 30
standby 111 name stan111
standby 111 timers msec 250 1
standby 111 preempt
standby 111 authentication wdpf
standby 111 ip 192.168.12.50
standby 111 track FastEthernet 0/0
standby 114 name stan114
standby 114 timers msec 250 1
standby 114 priority 105
standby 114 preempt delay minimum 180
standby 114 authentication wdpf
standby 114 ip 192.168.12.51
standby 114 track FastEthernet 0/0
ip access-group 111 in
ip access-group 114 out
no shutdown
exit
access-list 111 permit icmp 192.168.30.0 0.0.0.255 192.168.30.50 0.0.0.0
access-list 111 permit icmp 192.168.30.0 0.0.0.255 192.168.30.51 0.0.0.0
access-list 111 permit icmp 192.168.30.0 0.0.0.255 192.168.4.0 0.0.1.255
access-list 111 permit tcp 192.168.30.0 0.0.0.255 range 502 503 192.168.4.0 0.0.1.255 established
access-list 111 permit udp 192.168.30.0 0.0.0.255 eq 1985 224.0.0.2 0.0.0.0 eq 1985
!
!
access-list 114 permit icmp 192.168.30.50 0.0.0.0 192.168.30.0 0.0.0.255
access-list 114 permit icmp 192.168.30.51 0.0.0.0 192.168.30.0 0.0.0.255
access-list 114 permit icmp 192.168.4.0 0.0.1.255 192.168.30.0 0.0.0.255
access-list 114 permit tcp 192.168.4.0 0.0.1.255 192.168.30.0 0.0.0.255 range 502 503
!
If I need to remove the vlan from ACL to make it open (Since I am trying to troubleshoot some connection issue)
DO I just type the following for Vlan .
"no ip access-group 111 in"
"no ip access-group 114 out"
Will that make Vlan 101 accept all the traffic.. or by typing these commands will inhibit vlan 101.
Sorry for a dumb questions but I wanted to be sure since I am working on a live system and I wanted to be careful..
Thanks
