Cisco DMZ

[geekender]

Anyone know how to set up ACL's so that I can allow inbound acces to a specific IP address on my network, and only that ip address?

 

[spidey07]

access-list 101 permit ip host <source IP> host <dst IP>

 

[Fuzznuts]

Originally posted by: spidey07
access-list 101 permit ip host <source IP> host <dst IP>

in your case access-list 101 permit ip any host <dst ip> as you dont know what the source address will be if its a hosting server i.e webserver. although if you were hosting you would surely just allow traffic to those ports?

eg if you were hosting a web server

ip access-list 101 permit tcp any host <dst ip> eq 80

 

[geekender]

Thanks.