I'm running cisco WS-C4948-10GE (MPC8540) and having a vlan configured as following:

ip address

My question is, How to create an ACL to limit the connections for ports 80 and 22 on IP "" and allow access to it only from and

Please note that the other IPs on this subnet " -" should be normally accessed on all ports from everywhere.



Hosts on the same vlan are not limited by the access list.

Access-list extended neteng-se
    Permit tcp host host eq www
    Permit tcp host host eq 22
    Deny ip any host
    Permit ip any any

Interface vlan 1
Ip access-list neteng-se out

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.