[c-nsp] many interfaces in router, how to easy use the access-list rules

Deric Kwok deric.kwok2000 at gmail.com
Thu Feb 5 15:47:41 EST 2009


Hi

I just try to put permit and deny rules in my router eg: for http access

eg: I have 3 ip addresses in the router in different interface 0 and 1

What is the easy way to put access-list for permit and deny to access http
in the router?

eg: my router interfaces 192.168.0.1/29, 192.168.3.1/24........

access-list permit tcp outsideip1 to 192.168.0.1 eq www
access-list permit tcp outsideip1 to 192.168.3.1 eq www
access-list permit tcp outsideip2 to 192.168.0.1 eq www
access-list permit tcp outsideip2 to 192.168.0.1 eq www
xxxxxx
xxxxxxx
access-list deny tcp any 192.168.0.1 eq www
xxxx

It will have many access-list rules for http only

Thank you


More information about the cisco-nsp mailing list