Access-list Question and ports

Feb 18, 2006 1 Replies
T

All,



I want to allow full communications and all ports (23, 21, 5000, etc) to be opend between 2 vlans.


1st vlan 112 access-list 112 permit tcp any any 167.186.72.0 0.0.0.255 167.186.182.0
0.0.0.255 access-list 112 permit udp any any 167.186.72.0 0.0.0.255 167.186.182.0
0.0.0.255


2nd access-list 172 permit tcp any any 167.186.182.0 0.0.0.255 167.186.72.0



0.0.0.255 access-list 172 permit udp any any 167.186.182.0 0.0.0.255 167.186.72.0
0.0.0.255

Any assitance would be appreciated



Vote
Twitter Facebook LinkedIn
B

You said you wanted to allow full communications, but you're only allowing TCP and UDP. There's more than that, such as ICMP. If you want to allow full communications, why not just allow all IP?

Also, what's that "any any" doing there? You have that in the place where the IP and wildcard should be, so putting the IP and wildcard after it results in a syntax error.

What you want is:

access-list 112 permit ip 167.186.72.0 0.0.0.255 167.186.182.0 0.0.0.255

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required