cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
420
Views
0
Helpful
1
Replies

VPN RDP Access List

Hi,

I have configured remote access VPN for remote location.Now i want to take RDP from my corporate office to remote office systems for that i have configured the below mentioned acl but it's not working. below i have mentioned the acl details please help me.

access-list 103 extended permit tcp host 192.168.10.135 host 172.16.10.2 eq 3389

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.28 eq www

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.22 eq 135

access-list 103 extended permit icmp any any

access-list 103 extended permit udp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq domain

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq ldap

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq domain

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq 135

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.45 eq 137

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.22 range 1024 65535

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.55 eq 137

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.55 eq netbios-ssn

access-list 103 extended permit udp 172.16.10.0 255.255.255.0 host 192.168.10.55 eq netbios-ns

access-list 103 extended permit tcp 172.16.10.0 255.255.255.0 host 192.168.10.55 eq 138

192.168.10.135= corporate User System

172.16.10.0/24=Remote office Network

192.168.10.28=Web server

192.168.10.45=AD Server

192.168.10.22=Mail server

Thanks,

1 Reply 1

andrew.prince
Level 10
Level 10

I am assuming that the remote offices are connected via VPN to the coporate office.  You ACL applies to traffic originating from the Remote office to the corperate office so 172.16.10.0/24 => 192.168.10.0/24

Your entry for RDP is incorrect you are allowing 192.168.10.135 => to 172.16.10.2 - so you can see it will not work, incorrect direction.

HTH>

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: