12-28-2010 05:54 AM
Hi,
I have configured remote access VPN for remote location.Now i want to take RDP from my corporate office to remote office systems for that i have configured the below mentioned acl but it's not working. below i have mentioned the acl details please help me.
access-list 103 extended permit tcp host 192.168.10.135 host 172.16.10.2 eq 3389
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.28 eq www
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.22 eq 135
access-list 103 extended permit icmp any any
access-list 103 extended permit udp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq domain
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq ldap
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq domain
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq 135
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq 137
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.22 range 1024 65535
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.55 eq 137
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.55 eq netbios-ssn
access-list 103 extended permit udp 172.16.10.0 255.255.255.0 host 192.168.10.55 eq netbios-ns
access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.55 eq 138
192.168.10.135= corporate User System
172.16.10.0/24=Remote office Network
192.168.10.28=Web server
192.168.10.45=AD Server
192.168.10.22=Mail server
Thanks,
12-29-2010 04:21 AM
I am assuming that the remote offices are connected via VPN to the coporate office. You ACL applies to traffic originating from the Remote office to the corperate office so 172.16.10.0/24 => 192.168.10.0/24
Your entry for RDP is incorrect you are allowing 192.168.10.135 => to 172.16.10.2 - so you can see it will not work, incorrect direction.
HTH>
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide