Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I would like to create ACL to allow port 22, 80, 443 from outside and drop any other service . can you please explain to me how to do it?

share|improve this question
add comment

2 Answers

Great explanations here:

http://www.petri.co.il/csc_how_to_use_cisco_ios_access_lists_01.htm

Basically, you want to create an ACL that will have three statements, and apply it to the ingress side of the your external interface. That post pretty much explains it in detail so no need for me to rehash what you can just read.

share|improve this answer
add comment

Remember that switch ACL's are not statefull and you need to consider return traffic from your outgoing requests.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.