topic RE: HI Friends need to allow 192.168.27.55 acl policey in Scripting

HI Friends need to allow 192.168.27.55 acl policey

Mohammed_Jashee — Tue, 09 Sep 2014 14:29:00 GMT

This policy we need to allow IP:192.168.27.55 only.kindly Help as

Policy: test
entry Deny_53 {
if match all {
source-address 192.168.53.0/24 ;
destination-address 192.168.26.0/24 ;
}
then {
deny ;
count Deny_53 ;
}
}
entry Deny_27 {
if match all {
source-address 192.168.27.0/24 ;
destination-address 192.168.26.0/24 ;
}
then {
deny ;
count Deny_27 ;
}
}
entry Deny_51 {
if match all {
source-address 192.168.51.0/24 ;
destination-address 192.168.26.0/24 ;
}
then {
deny ;
count Deny_51 ;
}
}
entry Permit {
if match all {
source-address 0.0.0.0/0 ;
}
then {
permit ;
}
}
Number of clients bound to policy: 1
Client: acl bound once

RE: HI Friends need to allow 192.168.27.55 acl policey

Paul_Russo — Tue, 09 Sep 2014 15:25:00 GMT

Hello Mohammed

I don't understand what you need to do. I see the specific denies for the source and destination ranges. Then you have an explicit permit which should let everything else through.

Do you need the specific IP going to a specific host?

Thanks
P

RE: HI Friends need to allow 192.168.27.55 acl policey

Mohammed_Jashee — Tue, 09 Sep 2014 15:53:00 GMT

hallow Paul
I need allow specific host access 192.168.26.0 network

RE: HI Friends need to allow 192.168.27.55 acl policey

Paul_Russo — Tue, 09 Sep 2014 16:00:00 GMT

ok so all we need to do is put two permits at the beginning of the policy something like this

entry Permit_26 {
if match all {
source-address 192.168.27.55/32 ;
destination-address 0.0.0.0/0 ;
}
then {
permit ;
count permit_26 ;
entry permit_26_2 {
if match all {
source-address 0.0.0.0/0 ;
destination-address 192.168.27.55/32 ;
}
then {
permit ;
count permit_26_2;

put these before the denies. this will allow traffic to and from that host

P

RE: HI Friends need to allow 192.168.27.55 acl policey

Mohammed_Jashee — Wed, 10 Sep 2014 13:57:00 GMT

thanks paulthat problem is solved