Hi all,

Hi have an ADSL router with dialer wan interfaz and negotiating IP with the ISP.

I am doing NAT as well.

I have several static PATs configured for publishing some services.

I have no ACL configured more than the one in vty line for ssh access.

I would like to control the access to the pat translation, in a source IP basis.

I am trying to do something like:

access-list 120 permit tcp host public_IP_clientA host my_public_IP eq 22

access-list 120 deny tcp any host mypublic_IP eq 22

access-list 120 permit ip any any

access-list 120 permit icmp any any

With this I want client A to be the only one who can access my internal ssh service on port 22.

The point is that once I add this acl, my router losses the communication with inet. I have added the last two statements trying to permit all ip and icmp traffic.

Can anyone help my? How can I allow all traffic with an ACL? Is there any way of setting up a rule like: access-list 120 permit any_protocol any any for avoiding implicit deny all policy?

Thanks in advance,

Jorge