[rbak-nsp] Policy access-list

[Łukasz Kopiszka]

W dniu 12.07.2019 o 08:49, Bartek Mickiewicz pisze:
> Hi,
Hi,
> I'm having problem with policy access-list. I want to block all
> incoming connections to port 88 and allow two IP addresses to access
> that port. 
> I've tried:
> seq 98 permit tcp any any eq 88 class Deny
> seq 103 permit tcp host xx.xx.xx.xx any eq 88 class Permit
> seq 103 permit tcp host yy.yy.yy.yy any eq 88 class Permit

How and where do you attach ACL?

Working example:

 ip access-list ProtectClients
  seq 100 permit tcp any eq 88 host 1.1.1.1
  seq 500 deny tcp any eq 88
  seq 999 permit ip any any

 subscriber default
   ip access-group ProtectClients in


-- 
Best regards,
Łukasz Kopiszka
http://alfa-system.pl

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/redback-nsp/attachments/20190712/83f4e233/attachment.htm>