Dear All,   I am working on a scenario to limit the access to servers as mentioned in below configuration. i am running a big subnet of 192.168.8.1/21, now as soon as i apply this VACL whole vlan traffic gets stopped. How should i resolve this issue that rest of the vlan users doesn't get affected ? Need help in this regard.   Talha   access-list 101 permit ip host 192.168.8.178 host 192.168.10.135 access-list 101 permit ip host 192.168.10.49 host 192.168.10.135 access-list 101 permit ip host 192.168.11.13 host 192.168.10.135 access-list 101 permit ip host 192.168.11.14 host 192.168.10.135 access-list 101 permit ip host 192.168.8.178 host 192.168.8.216 access-list 101 permit ip host 192.168.10.49 host 192.168.8.216 access-list 101 permit ip host 192.168.11.13 host 192.168.8.216 access-list 101 permit ip host 192.168.11.14 host 192.168.8.216     3750(conf)#vlan access-map SERVER_ACCESS 10 3750(config-access-map)#match ip address 101 3750(config-access-map)#action forward 3750(conf)#vlan access-map SERVER_ACCESS 20 3750(config-access-map)#action drop 3750(conf)#vlan filter SERVER_ACCESS vlan-list 1 ... View more

Dear All,   I have been working on VACL to limit access to servers to specific users, but when i applied this all the traffic from that vlan got stopped. What should i do so that rest of the traffic flows normally? Here is my configuration and the server ip's are 192.168.8.178, 192.168.10.49, 192.168.11.13, 192.168.11.14 and the users ip's are defined as per below configuration. I have this one big subnet 192.168.8.1/21 in my network and have to accomplish this task. Need help in this regard.   Thanks & Regards, Talha   access-list 101 permit ip host 192.168.8.178 host 192.168.10.135 access-list 101 permit ip host 192.168.10.49 host 192.168.10.135 access-list 101 permit ip host 192.168.11.13 host 192.168.10.135 access-list 101 permit ip host 192.168.11.14 host 192.168.10.135 access-list 101 permit ip host 192.168.8.178 host 192.168.8.216 access-list 101 permit ip host 192.168.10.49 host 192.168.8.216 access-list 101 permit ip host 192.168.11.13 host 192.168.8.216 access-list 101 permit ip host 192.168.11.14 host 192.168.8.216 access-list 101 permit ip host 192.168.8.178 host 192.168.11.69 access-list 101 permit ip host 192.168.10.49 host 192.168.11.69 access-list 101 permit ip host 192.168.11.13 host 192.168.11.69 access-list 101 permit ip host 192.168.11.14 host 192.168.11.69 access-list 101 permit ip host 192.168.8.178 host 192.168.12.77 access-list 101 permit ip host 192.168.10.49 host 192.168.12.77 access-list 101 permit ip host 192.168.11.13 host 192.168.12.77 access-list 101 permit ip host 192.168.11.14 host 192.168.12.77 access-list 101 permit ip host 192.168.8.178 host 192.168.8.6 access-list 101 permit ip host 192.168.10.49 host 192.168.8.6 access-list 101 permit ip host 192.168.11.13 host 192.168.8.6 access-list 101 permit ip host 192.168.11.14 host 192.168.8.6 access-list 101 permit ip host 192.168.8.178 host 192.168.10.102 access-list 101 permit ip host 192.168.10.49 host 192.168.10.102 access-list 101 permit ip host 192.168.11.13 host 192.168.10.102 access-list 101 permit ip host 192.168.11.14 host 192.168.10.102 access-list 101 permit ip host 192.168.8.178 host 192.168.12.147 access-list 101 permit ip host 192.168.10.49 host 192.168.12.147 access-list 101 permit ip host 192.168.11.13 host 192.168.12.147 access-list 101 permit ip host 192.168.11.14 host 192.168.12.147 access-list 101 permit ip host 192.168.8.178 host 192.168.10.159 access-list 101 permit ip host 192.168.10.49 host 192.168.10.159 access-list 101 permit ip host 192.168.11.13 host 192.168.10.159 access-list 101 permit ip host 192.168.11.14 host 192.168.10.159 access-list 101 permit ip host 192.168.8.178 host 192.168.10.100 access-list 101 permit ip host 192.168.10.49 host 192.168.10.100 access-list 101 permit ip host 192.168.11.13 host 192.168.10.100 access-list 101 permit ip host 192.168.11.14 host 192.168.10.100 access-list 101 permit ip host 192.168.8.178 host 192.168.9.42 access-list 101 permit ip host 192.168.10.49 host 192.168.9.42 access-list 101 permit ip host 192.168.11.13 host 192.168.9.42 access-list 101 permit ip host 192.168.11.14 host 192.168.9.42 access-list 101 permit ip host 192.168.8.178 host 192.168.8.94 access-list 101 permit ip host 192.168.10.49 host 192.168.8.94 access-list 101 permit ip host 192.168.11.13 host 192.168.8.94 access-list 101 permit ip host 192.168.11.14 host 192.168.8.94   3750(conf)#vlan access-map SERVER_ACCESS 10 3750(config-access-map)#match ip address 101 3750(config-access-map)#action forward 3750(conf)#vlan access-map SERVER_ACCESS 20 3750(config-access-map)#action drop 3750(conf)#vlan filter SERVER_ACCESS vlan-list 1 ... View more

Dear All,   I came across a scenario where this network is running a  192.168.8.1/255.255.248.0 which basically starts a big host range of 192.168.8.1 - 192.168.15.254. Now i am asked to give server access to limited users. Server IP here is 192.168.11.13 and users from these IP's are only allowed to have access to the server (192.168.10.15, 192.168.8.35, 192.168.9.236). How should i accomplish this task since it is part of one big vlan ? Need help guys in this regard.   Thanks & Regards ... View more

Dear All,   I have been using Cisco ASA 5510 for last 7-8 years now the requirement is to upgrade to IOS so that the current firewall supports advance encryption schemes. Currently i am running Cisco Adaptive Security Appliance Software Version 8.2(5)55 . What should be the upgrade path so that i can make maximum use of the current hardware ?   Hardware: ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 1599 MHz Internal ATA Compact Flash, 256MB   Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0) Boot microcode : CN1000-MC-BOOT-2.00 SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03 IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05 ... View more