Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We received a preconfigured router, however it was not configured correctly. Initially, our Guest and BYOD VLANs had no access to the internet. I added
access-list 130 permit ip 192.168.2.0 0.0.0.255 anyaccess-list 130 permit ip 192.168.3.0 0.0.0.255...
This is what the 130 access list looks like now. But, the 192.168.2.0 network still has full access to 172.17.43.0. Any ideas?
access-list 130 deny ip 172.17.43.0 0.0.0.255 10.15.48.0 0.0.0.255
access-list 130 deny ip 172.17.43.0 0.0.0.255 172.1...
Oh, I see, I need to specify udp or tcp instead of just ip.
Now for my port forwarding, do I need to create a new route map linked to another access list in order for it to work?
Thanks, that should be pretty simple. However, I'm trying to give BYOD access to a DNS server on 172.17.43.0
This is what I'm trying to enter
configure terminalip access-list extended 13033 permit ip 192.168.2.0 0.0.0.255 host 172.17.43.7 eq domain
...