1

My question is about the tcp/udp port numbers on an extended ACL on a Cisco firewall. I want to allow udp and tcp to a server that uses https.

My commands so far are:

access-list Ex extended permit tcp <ip> <subnet> <ip> <subnet> eq 443 access-list Ex extended permit udp <ip> <subnet> <ip> <subnet> eq 80

Should I also have access-list Ex extended permit tcp <ip> <subnet> <ip> <subnet> eq 80 and access-list Ex extended permit udp <ip> <subnet> <ip> <subnet> eq 443?

  • 1
    HTTP and HTTPS use TCP, not UDP. – Ron Maupin Oct 14 '17 at 5:43
2

no need to open UDP you need to open only TCP ports 80 and 443

access-list Ex extended permit tcp <ip> <subnet> <ip> <subnet> eq 443 
access-list Ex extended permit tcp <ip> <subnet> <ip> <subnet> eq 80

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.