Help required for ACL policy

[ddpatil89]

Hi Team,

I need to create an acl in exos which will permit traffic if it matches source, destination & protocol in addition with any port from list of port.

I created the policy like below but it giving me an error.

entry 3 {
if match all {
source-address 0.0.0.0/0;
destination-address 172.16.108.174/32;
protocol tcp;
}
if match any {
destination-port 8080; 
destination-port 2121; 
} then {
count test;
permit;
}
}

check policy Mundra.pol
Error:  Policy Mundra has syntax errors
Line 25 : Did not get expected keyword "then","if" is not valid

Please help.
 

[Miguel-Angel_RO]

You’re welcome,

Please mark the topic as solved

Mig

[ddpatil89]

thanks for help. it resolved my issue.

[Miguel-Angel_RO · Accepted solution]

I think you’re missing the then statement for the entry 3:

entry 3 {
if match all {
source-address 0.0.0.0/0;
destination-address 172.16.108.174/32;
destination-port 8080; 
protocol tcp;
} then {
count test;
permit;

}}

entry 4 {
if match all {
source-address 0.0.0.0/0;
destination-address 172.16.108.174/32;
destination-port 2121; 
protocol tcp;
} then {
count test;
permit;

}}
 

Mig

[ddpatil89]

vi Mundra.pol
i
entry 1 {
if match all {
source-address 0.0.0.0/0;
destination-address 172.16.108.10/32;
} then {
count test;
deny;
}
}
entry 2 {
if match all {
source-address 0.0.0.0/0;
destination-address 172.16.108.141/32;
} then {
count test;
deny;
}
}
entry 3 {
if match all {
source-address 0.0.0.0/0;
destination-address 172.16.108.174/32;
protocol tcp;
}
if match any {   ---------------------- error belongs to this line
destination-port 8080; 
destination-port 2121; 
} then {
count test;
permit;
}
}