access-list

Article View: comp.dcom.sys.cisco

Article #91

Back to comp.dcom.sys.cisco Previous Next

#91

From: Operator
Date: Thu, 06 Aug 1992 23:43

29 lines
1464 bytes

Well it's time again for another access-list question.

I have got 4 interfaces into my cisco. 2 ethernet and 2
serial. My local net is on one ethernet and internet goes
to one serial interface. I am trying to set the access-list
so that ip connection is allowed to 2 hosts from outside and
ip connection be allowed from all hosts inside. I have tried
setting access-group 101 for the ethernet interface and using:

access-list 101 permit ip 0.0.0.0 255.255.255.255 nnn.nnn.nnn.13 0.0.0.255
access-list 101 permit ip 0.0.0.0 255.255.255.255 nnn.nnn.nnn.47 0.0.0.255
access-list 101 permit ip nnn.nnn.nnn.0 0.0.0.255 0.0.0.0 255.255.255.255
access-list 101 deny ip 0.0.0.0 255.255.255.255 nnn.nnn.nnn.0 0.0.0.255

Where nnn is my network numbers.

This scheme doesn't work, and any connection is being allowed into my net!
Am I missing something here? Or do I need to get new firmware for my cisco?
 My show version shows:

GS Software (GS2-S), Version 8.1(19)
Copyright (c) 1986-1990 by cisco Systems, Inc.
Compiled Mon 06-Aug-90 02:18

System Bootstrap, Version 4.2(4)

Can anyone help please?

zod@ncube.com

Technical Details

Message-ID: <1992Aug6.234311.2529@ncube.com>

Path: arc1-ca.pugleaf.net!sparky!uunet!ncube.com!ugly!zod

Show Full Headers

Complete Article Headers

Newsgroups: comp.dcom.sys.cisco
Path: arc1-ca.pugleaf.net!sparky!uunet!ncube.com!ugly!zod
From: zod@ugly.NoSubdomain.NoDomain (Operator)
Subject: access-list
Message-ID: <1992Aug6.234311.2529@ncube.com>
Sender: root@ugly (Operator)
Nntp-Posting-Host: ugly
Organization: nCUBE CORPORATION
Date: Thu, 6 Aug 1992 23:43:11 GMT
Lines: 29