I suspect that there are other protocols need to be included in the access list , Now I need to know a way to monitor all traffic from a specific IP . there must be a debug command to show me all traffic forwarded to the 132.1.1.214 from a x.x.x.x IP . I expect the output would be something like 132.1.x.x src port 5445 des port 110 --> external ip could you help me with that ?
... View more
I made some changes to the access list Core-Switch-A#sho access-lists cyber Extended IP access list cyber 20 permit tcp any any eq pop3 21 permit udp any any eq domain (244 matches) 23 permit tcp any any eq domain 30 permit tcp any any eq 993 31 permit tcp any any eq 995 32 permit tcp any any eq 465 40 permit tcp any any eq smtp (4 matches) Core-Switch-A#show route-map cyber route-map cyber, permit, sequence 10 Match clauses: ip address (access-lists): cyber Set clauses: ip next-hop 132.1.1.214 Policy routing matches: 1175 packets, 93858 bytes Core-Switch-A# Clients can access SMTP , but the problem now is with pop3 traffic
... View more
thank you for your reply . there are other vlans in the c6506 switch , but they are not related and routing between vlans is working fine , clients are trying to send pop3 + smtp traffic to an external email server on the internet .
... View more
hi our network consists of two routers , the first is cisco 6506-E , the second is cyberoam750 UTM c6506=132.1.99.1 cyberoam = 132.1.1.214 all clients connected as seen in the pic below . and all clients have 132.1.99.1 as the default gateway I want to forward pop3+smtp traffic from clients to cyberoam . I have done the following : Core#access-list 101 permit tcp any any eq smtp Core#access-list 101 permit tcp any any eq pop3 Core#interface vlan 1 Core#ip policy route-map cyber Core#route-map cyber permit 10 Core#match ip address 101 Core#set ip next-hop 132.1.1.214 unfortunately it didn't work ,, probably because client,core switch , and cyberoam all are in the same vlan , vlan 1 what is the solution for my case ?
... View more
.jpg "Hall of Fame Expert"){kind=icon}
