ACL allowing traffic for just 1 out of 3 machines (?)

Mar 21, 2006 6 Replies
J

I have 3 machines attached to a Cisco switch off of a Cisco 2801 router. I'm attempting to only allow 3 open ports to inbound traffic (to all three machines) utilizing an ACL on the router.



Here's my problem... the below ACL takes effect for just one server-it allows all 3 ports on server 1- but server 2 and 3 get all ports blocked to them. Once I remove the ACL I have access to all 3 ports on all 3 machines.



Router Config - (abbreviated) Int eth0/1 IP Access-group 101 in



access-list 101 permit tcp any any eq 21 access-list 101 permit tcp any any eq 22 access-list 101 permit tcp any any eq 4444 deny ip any any



Vote
Twitter Facebook LinkedIn
M
  1. post IOS version

2 try

access-list 101 permit tcp any host eq 21 access-list 101 permit tcp any host eq 22 access-list 101 permit tcp any host eq 4444 access-list 101 permit tcp any host eq 21 access-list 101 permit tcp any host eq 22 access-list 101 permit tcp any host eq 4444 access-list 101 permit tcp any host eq 21 access-list 101 permit tcp any host eq 22 access-list 101 permit tcp any host eq 4444 access-list 101 deny ip any any

Vote
Twitter Facebook LinkedIn
M

Please post the complete IOS version as displayed by show version - i.e. including the maintentance portion of the release number

Vote
Twitter Facebook LinkedIn
J

Cisco IOS Software, 2801 Software (C2801-IPBASE-M), Version 12.3(11)T2, RELEASE SOFTWARE (fc1) Technical Support:

formatting link
(c) 1986-2004 by Cisco Systems, Inc. Compiled Fri 29-Oct-04 02:02 by cmong

ROM: System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1)

Cisco 2801 (revision 4.1) with 116736K/14336K bytes of memory. Processor board ID FCZ090622DT

thank you!

Vote
Twitter Facebook LinkedIn
M

I could not locate 12.3(8r)T8 on CCO.

the latest release shown for the 2801 in the 12.3 stream is 12.3(14)T6

You might want to consider upgrading to this release.

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required