I'm trying to create an acl for use with a nat but I can't get the deny statements working.
All hosts on a private network should be accessible, except from a server which should not be accessible from anywhere but 192.168.10.0 and 192.168.11.0. The router reaches out to an ISP (22.214.171.124) via the IP: 126.96.36.199
This is what I have so far for the acl:
ip access-list extended acltest remark Prevent server from reaching outside NAT deny ip 192.168.10.20 0.0.0.0 remark Allow access for other hosts on the networks permit ip 192.168.10.0 0.0.0.255 any permit ip 192.168.11.0 0.0.0.255 any
Doing this I get a message about incomplete statements.
I have also tried doing:
deny host 192.168.10.20
...but this returns an "invalid input" message at the start of 'host'.
After checking the list, the permit statements go through but the deny one doesn't. What am I doing wrong with the list? Thanks.