I have problems when wanting to permit only the access only to certain HOSTS and DNS in a Cisco 7500.
 
AddToReply      \
    cisco-avpair = "ip:inacl#0=permit ip any any precedence immediate",\
    cisco-avpair = "ip:inacl#1=permit udp any host 200.45.0.115 eq 53",\
    cisco-avpair = "ip:inacl#2=permit udp any host 200.45.191.35 eq 53",\
    cisco-avpair = "ip:inacl#3=permit tcp any any established",\
    cisco-avpair = "ip:inacl#4=permit tcp any host 200.45.0.42 eq 80",\
    cisco-avpair = "ip:inacl#5=permit tcp any host 200.45.190.149 eq 80",\
    cisco-avpair = "ip:inacl#6=permit tcp any host 200.45.190.150 eq 80",\
    cisco-avpair = "ip:inacl#7=permit tcp any host 200.45.0.35 eq 80",\
    cisco-avpair = "ip:inacl#99=deny ip any any"

Would it to be ok?

 

Reply via email to