11-25-2020 05:27 PM
Hello, I have lab in GNS3 with 2 pc, exosvm switch and ubuntu server with www on apache and SSH. How can I connect PC1 only to www site and PC2 only to SSH. How can I use ACL to do it? Any advice?
I’m glad for any help.
11-28-2020 09:01 AM
Jasioswski,
Here from my cheat sheet:
#STATIC = from a policy
'1-Check if there are enough ACL resources available
'2-Create a STATIC ACL policy file
#edit policy <policy-name>.pol 'edit = vi
# entry <rule-name> {
# if {<condition>;}
# then{<actions>;}
# }
edit policy denyTelnet.pol
entry noTelnet {
if {
destination-address 10.1.10.1/32;
source-address 10.1.10.101/32;
protocol tcp;
destination-port 23;
}
then {
deny;
}
}
'3-Save or copy the policy file to the flash as .pol
'4-Check the policy for syntax errors
check policy <policy-name>
'5-Apply the policy to port(s), VLAN(s) or any "wildcard"
#immediately applied
#precedence is port, VLAN, wildcard
configure access-list <policy-name>.pol ports <ports_numbers>[ingress|egress]
configure access-list <policy-name>.pol vlan <vlan_name|vlan_ID>[ingress|egress]
configure access-list <policy-name>.pol any [ingress|egress]
refresh policy <policy_name> 'will refresh the deployment of the policy
'6-VERIFY
show policy
show policy <policy-name>
show access-list
Mig