All Questions
27 questions
3
votes
1
answer
44
views
ACL and PBR on Cisco Nexus
I have a Cisco Nexus switch that I'm using as my core router. It has a connection to a firewall that handles internet-bound traffic. The switch acts as the default gateway with a default route to the ...
- 33
0
votes
1
answer
79
views
How to combine port forwarding and NAT/PAT on Cisco router?
I have a problem, that I cannot bring together working PAT and Port forwarding on a Cisco router.
Here is my topology:
Explanation to topology:
Start connection sourced by 192.168.1.1 with ...
- 1
1
vote
2
answers
1k
views
Exclude a certain vlan/subnet from layer3 inter-vlan routing
We have new gen aruba (hpe) switches in our environment.
There is a backbone (5412R zl2) which all edge switches are connected to. The edge switches are also layer 3 (2930F). The backbone delivers ...
- 137
0
votes
1
answer
713
views
Cisco router access list not working as expected
I'm trying to set up a network in packet tracer with inter-VLAN routing. I need to restrict one of the VLANs to only accept traffic from the 172.25.30.0/24 network.
To do this I am using an access ...
- 3
1
vote
1
answer
197
views
Configure AAA on a router - Extended ACLs
How do I write a named extended ACL which will allow for traffic between a DNS from a LAN (IP address) to a DNS server at (IP address), ping from a host PC (IP address) to any destination and allow ...
0
votes
1
answer
3k
views
How do I apply an access list on a switch?
I'm configuring a very small network on packet tracer 8.0 and I have a single 2960-24TT switch which is connected to 2 PCs and 1 router. Everything is on the 24.17.2.0/24 network and I added a VLAN. I ...
- 21
1
vote
1
answer
602
views
How to block telnet access for one particular network from all networks except one using Extended ACL
Scenerio is given in the picture. I want to block all the networks except 192.168.5.128/25 from doing telnet of 192.168.5.0/25.
- 21
0
votes
1
answer
68
views
Router Standard ACL
I was configuring Standard ACL on router 1841 on Cisco Packet Tracer with the help of command access-list 1 permit 172.16.40.3 0.0.0.0 and access-list 1 deny 172.16.40.4 0.0.0.0 and then I applied ...
- 37
3
votes
3
answers
2k
views
How to add multiple ip address in destination ip in acl rule
Iam trying to block a certain host from sending any message to any host in the network
is there is a way to do that or i have to deny host by host ?
3
votes
1
answer
2k
views
Allowing only routed traffic, block intra-VLAN forwarding
In a mixed network of Dell and HP/Aruba devices, we would like to block all communication between client computers, and only allow them to communicate with servers located on a different VLAN*.
There ...
- 133
1
vote
1
answer
56
views
Help with this acl
This is what i am trying to do
Deny the network that host 200.200.200.10 is on, telnet access to R3
Permit host 200.200.200.10 to telnet to R3
Deny host 200.200.200.10 all access to host 204.10 on ...
- 13
1
vote
1
answer
1k
views
How to use ACL to deny sending packages to the GRE tunnel?
I need to do a small lab. The topology is shown on the image below:
What I need to do, is make static routing so all routers can ping each neighbour's physical interface, configure a GRE tunnel ...
- 13
2
votes
2
answers
1k
views
ACL not working HELP!
I want to block the traffic from the vlans 21 and 22 on the vlan 23 without blocking 24 and 29 with an extended access list but nothing happens. I'd like to know what's wrong in my config.
Here's the ...
- 21
3
votes
1
answer
185
views
How to permit behaviour in Cisco access-list commands?
If a host on a network is permitted to access another host on a different network via an ACL on the source host's router, does that automatically deny other hosts on the same network as the source ...
- 33
1
vote
1
answer
3k
views
Why is my ACL not blocking traffic on my cisco router interface?
So here is my config.
I want traffic coming from all networks except 172.23.1.0/24 to be blocked by inferface fa 0/0
So on the router I creater 2 ACLs
ACL 10
R1# access-list 10 permit 172.23.1.0 0....
- 190
1
vote
1
answer
2k
views
ACL permit and deny to default gateway OSPF routing
I have the topology below:
On the network 10.11.9.0/24 (Area 3), I want to allow only traffic to the Internet.
How would I go about this as I was thinking denying traffic to all my network and allow ...
- 25
3
votes
2
answers
5k
views
hpe 5700 (comware 7) vlan routing
I want to divide my network into smaller segments.
I want to use our HPE FF 5700-40XG-2QSFP+ switch as the router.
It runs comware 7.
VLAN 101 for servers, using 10.101.0.0/16, interface ip 10.101.1....
- 61
1
vote
2
answers
281
views
HP 5400Rzl2 strange ACL behaviour
Hello to all of you experts.
I'm sorry if this is a dumb question (I usually don't ask those, but I'm human), but I haven't a clue of what's wrong in this environment.
I wish to permit all my VLANs ...
- 33
2
votes
1
answer
484
views
Dell N2000: switch will not respond on configured in-band IP
I have an existing switch configuration which works, but is not satisfactory, and I want to switch to a different configuration that seems straightforward but I cannot get to work in production, ...
- 175
2
votes
2
answers
2k
views
Cisco ACLs: Whitelist approach to ACLs
I have been looking around and it seems list this would be a simple question so I am sorry if there is a duplicate somewhere.
I have a switch that is carrying a vlan 20 which is holding a /24 .
the ...
- 125
3
votes
2
answers
3k
views
Why "Deny all" statement in ACL is not working?
I want to block Host 192.168.1.1 from reaching 192.168.2.0/24 network and in order to implement that I've applied Extended ACL "ACL_FOR_R2" on R2's serial2/0 interface. Now as we all know that at the ...
- 347
3
votes
1
answer
156
views
How to manage ACL in a routed network
I have a full mesh core network running OSPF. I use OSPF down to the "L3 Agg switches". Now I want to restrict traffic between some of the networks at our site, but how is this done when there is ...
- 406
2
votes
1
answer
10k
views
Block Inter-Subnet Routing -Ubiquiti Edge Router
I would like to know how to block routing between subnets on my Ubiquiti EdgeRouter. These subnets are on 6 different VLANs, and the layout goes like this:
VLAN 1 - 10.0.0.1/24 (management)
VLAN ...
- 108
5
votes
1
answer
11k
views
HP V1910, VLAN routing - what did I miss?
First time posting in this part of stack exchange and I'm a novice regarding advanced network configuration - plug & play switch installation I can handle ;o)
I got myself a HP V1910-48G (former ...
- 215
14
votes
2
answers
2k
views
BGP regular expression .+_.+_.+_.+_.+_.+_.+_.+_.+_.+_.+_.+
could anyone tell me what ip as-path access-list 100 deny .+_.+_.+_.+_.+_.+_.+_.+_.+_.+_.+_.+ stands for?!
I searched over the internet for the meaning of this regular expression, but I was unable to ...
- 275
10
votes
3
answers
15k
views
Cisco: prevent vlan's of communicating with eachother on cisco router (ACL alternative)
Setup: Cisco router with multiple VLAN's configured on it.
How can you prevent 2 VLAN's communicating with eachother? Normally I would do this with ACL's like this:
access-list 102 deny ip 1.1.1.0 0....
- 2,393
23
votes
7
answers
41k
views
Difference between access list and prefix list?
Can someone explain with an example whats the difference between an access list and prefix list.
- 545