access-list & Dialer interesting traffic

Maybe someone can see what's wromng here. My local router will only seem to fire up the ISDN dialer when I have access-list 101 permit ip any any

**************** My local ethernet is 172.30.1.254 255.255.254.0. My PC is 172.30.1.100. When I have the above access list in the router the ISDN connects to the remote site. When I try to tighten up on the list the Dialer doesn't appear to see "interesting traffic". The new access list is: access-list 101 permit ip 172.30.0.0 255.255.254.0 any

- the config shows this as... access-list 101 permit ip 0.0.1.254 255.255.254.0 any ... so to my understanding - this is saying permit any IP traffic from the local LAN to any destination. I have debugs on for Dialer & ISDN events but nothing appears when I have the new access list in... TIA, Ned

********** interface FastEthernet0/0 ip address 172.30.1.254 255.255.0.0 no ip redirects ! interface Serial1/0:15 no ip address no ip directed-broadcast encapsulation ppp dialer pool-member 1 isdn switch-type primary-net5 fair-queue 64 256 0 ppp authentication chap ! ! interface Dialer1 description ISDN to 2a ip address 10.1.1.254 255.255.255.0 encapsulation ppp no ip route-cache no ip mroute-cache dialer pool 1 dialer remote-name site2a dialer string 12345 dialer idle-timeout 600 dialer hold-queue 40 dialer-group 1 no fair-queue no cdp enable ppp authentication chap ppp multilink ! access-list 101 permit ip any any dialer-list 1 protocol ip list 101 ! ************************ TIA, Ned
Reply to
Ned
Loading thread data ...

The new access

Are you saying you input to the IOS CLI:

access-list 101 permit ip 172.30.0.0 255.255.254.0 any

and sh run displays the access list as

access-list 101 permit ip 0.0.1.254 255.255.254.0 any

If so, then try

config t no access-list 101 access-list 101 permit ip 172.30.0.0 255.255.254.0 any end

sh access-list

post the outpu of show version and show access-list

Reply to
Merv

The mask used on ACL's is not like the mask used on IP addresses. You must the compliment of the mask you really want to use with ACLs (within my company we actually call them "bizzaro masks".) Your ACL should be:

access-list 101 permit ip 172.30.0.0 0.0.1.255 any

Reply to
Thrill5

Inverse mask you mean?

formatting link
Bizzaro mask, nice! I'll have to remember that one.

Reply to
Trendkill

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.