cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
958
Views
0
Helpful
1
Replies

Allow WEB access for a specifed users

petrutz_21
Level 1
Level 1

Hii,

I need a way to configure a 2801 Router for allowing some internal users to access a specifed list of web pages. For example i need that the user with ip 192.168.1.50 to have acces just to www.xxx.net and www.xxx.com and some other clients to have full access. It's this possible? And if it's possible i need a way to do this.

The IOS version is :

1. Cisco IOS Software, 2801 Software (C2801-IPBASE-M), Version 12.4(16b), RELEASE SOFTWARE (fc3)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2007 by Cisco Systems, Inc.

Compiled Thu 20-Dec-07 03:43 by prod_rel_team

ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)

System returned to ROM by power-on

System image file is "flash:c2801-ipbase-mz.124-16b.bin"

Cisco 2801 (revision 7.0) with 114688K/16384K bytes of memory.

Processor board ID FCZ123212X3

6 FastEthernet interfaces

DRAM configuration is 64 bits wide with parity disabled.

191K bytes of NVRAM.

62720K bytes of ATA CompactFlash (Read/Write)

I have made this conf :

class-map match-any AUTHORIZED_URLS

match protocol http url "*.xxx.net"             /* also i have put host ...

match protocol http url " *.xxx.com"

ip access-list extended RESTRICTED_USERS

permit tcp host 192.168.1.50 any eq www

class-map match-all USER_URLS

match access-group name RESTRICTED_USERS

match  not class AUTHORIZED_URLS

policy-map URL_POLICY

class USER_URLS

drop

interface Vlan1

service-policy input URL_POLICY

but this is blocking all the web access on the client with 192.168.1.50.

Regards,

1 Reply 1

Luis Silva Benavides
Cisco Employee
Cisco Employee

Hi,

In order to accomplish what you are looking for, we will need to upgrade the feature set to advanced-security or something that support FW features

Then you would be able to follow this great configuration guide and accomplish your goal!

https://supportforums.cisco.com/docs/DOC-23340

HTH

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach"

http://www.cisco.com/web/partners/tools/pdihd.html

Luis Silva