Access-list Question and ports

All,

I want to allow full communications and all ports (23, 21, 5000, etc) to be opend between 2 vlans.

1st vlan 112 access-list 112 permit tcp any any 167.186.72.0 0.0.0.255 167.186.182.0 0.0.0.255 access-list 112 permit udp any any 167.186.72.0 0.0.0.255 167.186.182.0 0.0.0.255

2nd access-list 172 permit tcp any any 167.186.182.0 0.0.0.255 167.186.72.0

0.0.0.255 access-list 172 permit udp any any 167.186.182.0 0.0.0.255 167.186.72.0 0.0.0.255

Any assitance would be appreciated

Reply to
Trouble
Loading thread data ...

You said you wanted to allow full communications, but you're only allowing TCP and UDP. There's more than that, such as ICMP. If you want to allow full communications, why not just allow all IP?

Also, what's that "any any" doing there? You have that in the place where the IP and wildcard should be, so putting the IP and wildcard after it results in a syntax error.

What you want is:

access-list 112 permit ip 167.186.72.0 0.0.0.255 167.186.182.0 0.0.0.255

Reply to
Barry Margolin

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.