I have a Cisco 1921 and I want to allow one WAN IP number (lets call it 126.96.36.199) to access a server on the LAN. My WAN interface is GigabitEthernet0/0 and my LAN interface is GigabitEthernet0/1. I have now one access list that is applied both to inbound GigabitEthernet0/0 and outbound GigabitEthernet0/1 it is this one here:
10 permit udp host 188.8.131.52 eq domain any 20 permit udp host NTPIP eq ntp host ciscoIP eq ntp 25 permit tcp host 184.108.40.206 eq 3389 host 192.168.31.9 eq 3389 26 permit udp host 220.127.116.11 eq 3389 host 192.168.31.9 eq 3389 28 deny udp any any eq 3389 29 deny tcp any any eq 3389 30 permit ip any any
With this access list I can not get my RDP connection to work, but if I replace that access list with one that has only one line
10 permit ip any any on the inbound interface GigabitEthernet0/0 then RDP works fine, which means I must have set up NAT port forwarding correctly right?
As far as I can tell then lines 25 and 26 should allow 18.104.22.168 to access port 3389 and lines 28 and 29 should ban all other IP's. So where am I going wrong here?