Help with an Access-List please - New to the forum

[K_Han]

Hello All, Brand new to this discussion forum and have arrived here requiring a bit of assistance.

I've inherited a Private Network and am getting the feel for it, however I hope you can give me a bit of guidance.

I have an old server Z.Z.Z.Z

I need to isolate this server on our network, only allowing a small number of Workstations access to Z.Z.Z.Z ,but also allow the Workstation access to everywhere else.I also need to restrict Z.Z.Z.Z's access to only those Workstations.

Ive been going round in circles, not having compiled an ACL for over 10years.

Can anyone give me the magic formula to set up and effective and tight ACL.

Thanks

K

[Dennis Mink]

No silver bullet. But here is the logic:

Of your acl:

1 permit hosts to server

2 deny any to server

3 permit any any ( or whatver else is needed)

[K_Han]

Thanks Dennis and hello Paul,

The server is running old MS OS and we must isolate it within our network allowing only a few Workstation access to it.

Thanks

K

[paul driver]

Hello

---

@K_Han wrote:

I have an old server Z.Z.Z.Z

I need to isolate this server on our network, only allowing a small number of Workstations access to Z.Z.Z.Z ,but also allow the Workstation access to everywhere else.I also need to restrict Z.Z.Z.Z's access to only those Workstations.

Can anyone give me the magic formula to set up and effective and tight ACL.

Thanks

K

---

What does the server serve, what is its role?

[K_Han]

THIS IS WHAT IVE GOT SO FAR:-

access-list 100 remark ########
access-list 100 permit ip A.A.A.A 0.0.0.0 host Z.Z.Z.Z
access-list 100 permit ip B.B.B.B 0.0.0.0 host Z.Z.Z.Z
access-list 100 permit ip C.C.C.C 0.0.0.0 host Z.Z.Z.Z
access-list 100 deny IP any host Z.Z.Z.Z
access-list 100 permit any any

Any good?