I am trying to practice some scenarios on a GNS3 lab that i am doing on my spare time (just doing a very very basic firewall for now since this is new to me)
currently my scenerios I am trying to accomplish is
1. Allow SSH (tcp destined to port 22) from 10.0.0.0/8 220.127.116.11/32 (fake ip) into my entire network (10.25.0.0/16). 2 Disallow all other SSH (tcp destined to port 22) to MY network. 3 Allow all other traffic inbound to my network. and I am implementing this on my border routers
so in my cisco switch (my ABR is called R2) I am using this format for firewall that i found online
#SEQUENCENUM (permit/deny) PROTO SRCIPADDRESS SRCWILDCARD [OPERATOR] [PORT] DESTIPADDRESS DESTNETMASK [OPERATOR] [PORT]
I have in my 'show access-list'
Extended IP access list 100
100 permit tcp 10.0.0.0 0.255.255.255 host 10.25.0.0 eq 22 200 permit tcp host 18.104.22.168 host 10.25.0.0 eq 22 300 deny tcp any host 10.25.0.0 eq 22 400 permit ip any host 10.25.0.0 999 permit ip any 10.25.0.0 0.0.255.255
for 400 - would this be correct syntax to allow all other traffic inbound to my network?
and for 999 - I want to permit all other traffic (that is not tcp to port 22 to your network) is this correct?
thanks a bunch guys