Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to create ACL to allow port 22, 80, 443 from outside and drop any other service . can you please explain to me how to do it?

share|improve this question

Great explanations here:

Basically, you want to create an ACL that will have three statements, and apply it to the ingress side of the your external interface. That post pretty much explains it in detail so no need for me to rehash what you can just read.

share|improve this answer

Remember that switch ACL's are not statefull and you need to consider return traffic from your outgoing requests.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.