Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,I have a problem on cisco C892. At the moment I apply a ACL-IN ACL on external Dialer0 int, I lose the connectivity from LAN to internet (ping, dns, http, everything), which is unwanted. While I still have RDP access from internet 2.2.2.0 network ...
Hello,
Some time ago I have inherited support of one Cisco C892FSP-K9 router with 15.3(3)M4 IOS.
The configuration is not so complex - LAN and separate Wifi network in the inside, One site-to-site VPN and couple of users are connecting to the LAN (mo...
Thank you for your help."permit ip any any" did the job and I have use a little bit changed ACL I have posted before.And thanks for correcting a command to "permit tcp any any established". I have decided not to use it at the moment, because I'm not ...
Hello,What about using "permit ip any any established" instead of "permit ip any any"?Should this work?Is there any difference in security if I block or not a certain port using ACL if is not used NAT rules?
Hi,thank you for quick answer.It wouldn't make more sense to change to:ip access-list extended ACL-INpermit ip 2.2.2.0 0.0.0.255 anypermit esp any anypermit udp any any eq isakmppermit udp any any eq non500-isakmppermit tcp any host 1.1.1.1 eq smtppe...
Hi,it looks that this configuration works as it should.I have accepted this message as solution. I hope it is ok this way - it is my first post here in this forum.And I want to thank everyone who tried to help me with this problem.Thank you very much...
And I'm aware that ACL are chaotic, but that will be next phase of cleanup.First I will need to find out what is actually in use.I cannot completely block outside smtp traffic as there is a mail server in LAN
