We have a test network that is partitioned off the production network via a routed connection and ACLs.
But a VNC session needs to be allowed from the test network to production network AND from production to test network.
The ACL will have to be 'any source' and 'any destination' networks, and I was going to use an INbound and an OUTbound ACL on the same interface from/to the test network (ie with a destination port eq 5900).
ip access-group 100
permit tcp any any eq 5900
deny ip any any
But if I apply above ACL to the egress/ingress interface to the test network, it will stop VNC traffic altogether (ie because there will not be a match for VNC data for the return conversation (will not match port 5900)).
Without purchasing a firewall, is there anyway I can apply a VNC ACL BOTHWAY filter.
Thanks in anticipation.