<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<div class="moz-cite-prefix">W dniu 12.07.2019 o 08:49, Bartek
Mickiewicz pisze:<br>
</div>
<blockquote type="cite"
cite="mid:CADbX=xvfPdD7dpGRaN0UGLjVGMKQivygTWcTGoNY4BfgnT5URg@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="auto">Hi,</div>
</blockquote>
Hi,<br>
<blockquote type="cite"
cite="mid:CADbX=xvfPdD7dpGRaN0UGLjVGMKQivygTWcTGoNY4BfgnT5URg@mail.gmail.com">
<div dir="auto">
<div dir="auto">I'm having problem with policy access-list. I
want to block all incoming connections to port 88 and allow
two IP addresses to access that port. </div>
<div dir="auto">I've tried:</div>
<div dir="auto"><span
style="font-family:sans-serif;font-size:12.8px">seq 98
permit tcp any any eq 88 class Deny</span><br
style="font-family:sans-serif;font-size:12.8px">
<span style="font-family:sans-serif;font-size:12.8px">seq 103
permit tcp host xx.xx.xx.xx any eq 88 class Permit</span><br
style="font-family:sans-serif;font-size:12.8px">
<span style="font-family:sans-serif;font-size:12.8px">seq 103
permit tcp host yy.yy.yy.yy any eq 88 class Permit</span><br>
</div>
</div>
</blockquote>
<p>How and where do you attach ACL?<br>
</p>
<p>Working example:<br>
</p>
<p> ip access-list ProtectClients<br>
seq 100 permit tcp any eq 88 host 1.1.1.1<br>
seq 500 deny tcp any eq 88<br>
seq 999 permit ip any any<br>
<br>
subscriber default<br>
ip access-group ProtectClients in<br>
</p>
<p><br>
</p>
<pre class="moz-signature" cols="72">--
Best regards,
Łukasz Kopiszka
<a class="moz-txt-link-freetext" href="http://alfa-system.pl">http://alfa-system.pl</a>
</pre>
</body>
</html>