1. Home
  2. Cisco Systems
  3. ACL allowing traffic for just 1 out of 3 machines (?)

ACL allowing traffic for just 1 out of 3 machines (?)

I have 3 machines attached to a Cisco switch off of a Cisco 2801 router. I'm attempting to only allow 3 open ports to inbound traffic (to all three machines) utilizing an ACL on the router.

Here's my problem... the below ACL takes effect for just one server-it allows all 3 ports on server 1- but server 2 and 3 get all ports blocked to them. Once I remove the ACL I have access to all 3 ports on all 3 machines.

Router Config - (abbreviated) Int eth0/1 IP Access-group 101 in

access-list 101 permit tcp any any eq 21 access-list 101 permit tcp any any eq 22 access-list 101 permit tcp any any eq 4444 deny ip any any

Reply to
Jammarx
Loading thread data ...
  1. post IOS version

2 try

access-list 101 permit tcp any host eq 21 access-list 101 permit tcp any host eq 22 access-list 101 permit tcp any host eq 4444 access-list 101 permit tcp any host eq 21 access-list 101 permit tcp any host eq 22 access-list 101 permit tcp any host eq 4444 access-list 101 permit tcp any host eq 21 access-list 101 permit tcp any host eq 22 access-list 101 permit tcp any host eq 4444 access-list 101 deny ip any any

Reply to
Merv

any help would be greatly appreciated .. thanks

Reply to
Jammarx

IOS 12.3

Thanks for your reply

Reply to
Jammarx

Please post the complete IOS version as displayed by show version - i.e. including the maintentance portion of the release number

Reply to
Merv

Cisco IOS Software, 2801 Software (C2801-IPBASE-M), Version 12.3(11)T2, RELEASE SOFTWARE (fc1) Technical Support:

formatting link
(c) 1986-2004 by Cisco Systems, Inc. Compiled Fri 29-Oct-04 02:02 by cmong

ROM: System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1)

Cisco 2801 (revision 4.1) with 116736K/14336K bytes of memory. Processor board ID FCZ090622DT

thank you!

Reply to
Jammarx

I could not locate 12.3(8r)T8 on CCO.

the latest release shown for the 2801 in the 12.3 stream is 12.3(14)T6

You might want to consider upgrading to this release.

Reply to
Merv

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.