On Fri, 12 Dec 2008, chloe K wrote:
I am doing the following access-list for www to restrict to switch http access
but when I apply it in the interface, i suddenly lost telnet connection.
Why?
Extended IP access list 110
permit tcp 192.168.0.0 0.255.255.255 any eq www
permit tcp 172.16.0.0 0.255.255.255 any eq www
permit tcp 10.0.0.0 0.255.255.255 any eq www
deny tcp any eq www any
deny tcp any eq www any log
You need to permit telnet connections. The ACL above only deals with HTTP
connections. Also, at the bottom of most packet-filtering ACLs like this,
there is an implicit "deny any", so if packet doesn't match against any of
your explicitly defined ACL rules, it will fall to that implicit "deny
any" and get dropped.
jms
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
