Tagged Questions

An access-list is a list of rules, usually held on network devices such as switches, routers or firewalls, that matches network traffic. The specific term 'access-list' is used in the context of Cisco devices, although the concept of an 'access list' is more generic.

learn more… | top users | synonyms

0
votes
1answer
364 views

Cisco ASA: port forwarding to different IP depending on client IP/subnet outside

I have Cisco ASA 8.2(5) and would like to configure port forwarding. Cisco ASA has 2 interfaces: outside with IP 192.168.57.2 inside with IP 192.168.1.1 I have two subnets reachable through ...
0
votes
0answers
46 views

Cisco IOS log packets dropped due to no NAT entries?

I use access list logging currently, and update the access list to match the NAT table, and then the access-list deny any any log command is used for logging packets that were not allowed. However, I ...
1
vote
3answers
1k views

How to block external access to the DNS service running on a Cisco router?

I have a Cisco (877) router acting as the main gateway for a network; it has a DSL connection and performs NAT from the internal network to its external, public IP address. The router allows SSH ...
0
votes
2answers
505 views

Cisco ASA5505, packet trace shows bootps and bootpc traffic is dropped on DMZ interface

As the title already states, I have a problem getting DHCPd working on the Cisco ASA5505 version 7.2 with ADSM 5.2 with the basic license. Its an older one I know, and every time I tend to forget how ...
1
vote
1answer
1k views

DHCP forwarding behind access list on a Cisco Catalyst

I'm having some trouble with forwarding DHCP from a subnet behind an access list on a Cisco Catalyst 4500 switch. I'm hoping somebody can see the mistake I'm making. The subnet is defined like this: ...
0
votes
1answer
356 views

How are these access lists interpreted by the router?

I'm puzzled because I can ssh into this router from 192.168.1.10, but not from 192.168.30.3 (as per acl 6). No interface mentions any of these access lists so am I correct in assuming these are global ...
4
votes
2answers
382 views

Cisco access list logging. Why is there a difference between IPv4 and IPv6?

I've got a Cisco 877 router. I've got an IPv4 access list and an IPv6 access list set up and configured similar to this: interface Dialer1 ... ip access-group INTERET-IN ipv6 ...
1
vote
1answer
575 views

Configuring PIX 506 with NAT for multiple public addresses

We are setting up a streaming service to an external client and they need access to an internal workstation along with certain ports open on our firewall. I need to configure two public IP addresses ...
1
vote
1answer
99 views

ASA permit only one host to *.xyz.com

I want to allow a host to download some updates from *.xyz.com (in internet). How should I permit only this host from my inside network to access *.xyz.com on ASA, access can be via http? At moment ...
2
votes
1answer
5k views

Cisco ASA 8.4 port forwarding

I am having trouble port-forwarding on an Cisco ASA from a host on the internet to a host on the internal network. The outside interface of the ASA is assigned via DHCP. Is there something else that ...
1
vote
1answer
586 views

Get access-list via SNMP

Is it possible to get the access-list of a Cisco Router via SNMP? I have been searching for that but until now i have not found anything.
1
vote
3answers
2k views

ASA5505 :: Access-list permit public ip on port list (not range)

This is likely a common issue, but cannot find a solution. Here's the problem: in web server environment there are a set of common ports that need to be open, to name a few: 21,25,53,80,110,143,3306, ...
1
vote
1answer
708 views

Filtering traffic into a Vlan in a Switched Network

I am designing a topology with one Core Switch and around 6 Edge Switches with around 10 Vlans managed through the VTP Server running on Core Switch. Inter Vlan routing is also enabled on the core ...
1
vote
0answers
464 views

Dell PowerConnect 6224F ACL Not Performing as Expected

What I'm trying to achieve is as follows: Allow full access to the device on 10.58.9.32 (our VoIP server), from anywhere on our network. Allow ICMP to flow in all directions to/from any device. ...
1
vote
2answers
730 views

ASA firewalls: how does stateful filtering affect my access lists?

Ok, so assume that I have an ingress access list that looks like this: access-list outside_in extended ip permit any X.Y.Z.1 eq 25 access-group outside_in in interface outside And I want to do ...
0
votes
2answers
2k views

Changing ASA access lists on the fly

I'm shortly going to be in a situation where I'll need to be updating a firewall on the fly. How does one update cisco ASA access lists on the fly? For example, if I start with: access-list ...
2
votes
2answers
196 views

DMZ-to-outside Access Lists

I'm learning about firewalls and access-lists, and I'm trying to decide what sort of access list I should have on the DMZ, particularly regarding outbound traffic. There's certain outbound traffic ...
1
vote
1answer
1k views

ASA access lists and Egress Filtering

I'm trying to learn how to use a cisco ASA firewall, and I don't really know what I'm doing. I'm trying to set up some egress filtering, with the goal of allowing only the minimal amount of traffic ...
1
vote
2answers
4k views

How Do i Add A LIne To A PIX Firewall's Access List?

I need to open a port on a PIX 515. Please can someone explain what I should be entering including the commands. For the purposes of the explanation (so I can understand it ) I've given the ...
5
votes
2answers
754 views

Cisco IOS: Segregating VLANS

I am trying to segregate the traffic on the VLANs, as one is our visitor VLAN (VLAN 3 is the guest lan). It is a Cisco 881W router. Here is my VLAN configuration: interface Vlan2 ip address ...
0
votes
3answers
224 views

I need access control within the same network/VLAN

I have a single network/VLAN and I want to block some traffic and allow some traffic in my network, is this possible using a L2 or L3 switch? If so which switches support this feature and what would ...
4
votes
3answers
3k views

Hosting multiple repositories, each with differing access control

We will need to host a series of Mercurial repositories. For security, we will use SSL encryption in Apache and htpasswd access (required). I tested out a single repository and used hgwebdir.cgi and ...
0
votes
5answers
1k views

Atrrib CMD Access Denied

I'm trying to remove the special attribute from the folder C:\windows\tasks using the command attrib -s C:\windows\tasks however I'm getting: Access denied - C:\windows\Tasks I am a local ...
0
votes
3answers
1k views

Cisco: How to make cisco NOT resequence access-list after reboot?

I have extended access-list BLOCK, where each entire has its own special number. EX: 1038047 deny ip any host 192.168.38.47 1038048 deny ip any host 192.168.38.48 1038049 deny ip any host ...
0
votes
5answers
325 views

Cisco PIX - What does this line do?

I found this line in among many other ACL lines in my PIX. It looks different than the rest of them. It's at the end of the rest of the ACL lines, including being after access-list acl-out deny ip ...