firstly thank you for helping.

Dear,

I configured my AS5400 ip address =55.55.55.49 and it it is running well….now I need to add access lists to prevent any attack or intrusions into my network…. I added the following lists but when I add them the services stopped and no calls , I need to know if there are ports I should open them and specially For ISDN.

access-list 100 permit ip host 216.64.22.5 any (carrier 1)

access-list 100 permit ip host 216.23.97.5 any

access-list 100 permit ip host 216.18.12.8 any (carrier 2)

access-list 100 permit udp host 55.55.55.30 any range 9000 9999

access-list 100 permit tcp host 55.55.55.30 any range 5060 5090

access-list 100 permit udp host 55.55.55.30 any range 5060 5090

access-list 100 permit udp host 55.55.55.30 any range 2427 2457

access-list 100 permit tcp host 55.55.55.30 any range 2427 2457

access-list 100 permit tcp host 55.55.55.30 any range 3100 3130

access-list 100 permit udp host 55.55.55.30 any range 3100 3130

access-list 100 permit tcp host 55.55.55.30 any eq 1500

access-list 100 permit tcp host 55.55.55.30 any eq 2099

access-list 100 permit udp host 55.55.55.30 any range 2100 2129

access-list 100 permit udp host 55.55.55.30 any eq domain

access-list 100 permit tcp host 55.55.55.30 any eq domain

access-list 100 permit udp host 55.55.55.30 eq domain any gt 1024

access-list 100 permit udp host 55.55.55.34 any range 9000 9999

access-list 100 permit tcp host 55.55.55.34 any range 5060 5090

access-list 100 permit udp host 55.55.55.34 any range 5060 5090

access-list 100 permit udp host 55.55.55.34 any range 2427 2457

access-list 100 permit tcp host 55.55.55.34 any range 2427 2457

access-list 100 permit tcp host 55.55.55.34 any range 3100 3130

access-list 100 permit udp host 55.55.55.34 any range 3100 3130

access-list 100 permit tcp host 55.55.55.34 any eq 1500

access-list 100 permit tcp host 55.55.55.34 any eq 2099

access-list 100 permit udp host 55.55.55.34 any range 2100 2129

access-list 100 permit udp host 55.55.55.34 any eq domain

access-list 100 permit tcp host 55.55.55.34 any eq domain

access-list 100 permit udp host 55.55.55.34 eq domain any gt 1024

access-list 100 permit tcp host 55.55.55.11 any eq domain

access-list 100 permit udp host 55.55.55.11 any eq domain

access-list 100 permit udp host 55.55.55.21 any eq 1812

access-list 100 permit udp host 55.55.55.21 any eq 1813

access-list 100 permit udp host 55.55.55.21 any eq 1645

access-list 100 permit udp host 55.55.55.21 any eq 1646

access-list 100 permit udp host 55.55.55.21 any eq 443

access-list 100 permit tcp host 55.55.55.21 any eq 1812

access-list 100 permit tcp host 55.55.55.21 any eq 1813

access-list 100 permit tcp host 55.55.55.21 any eq 1645

access-list 100 permit tcp host 55.55.55.21 any eq 1646

access-list 100 permit tcp host 55.55.55.49 any eq telnet

access-list 100 permit tcp host 55.55.55.49 any eq 22

access-list 100 deny icmp any any

access-list 100 deny ip any any

Any help please ?

can help me please?

if i add at PGW new command for existing E1 configuration and discovered this command not correct can simply remove that command and the service then back to work again?

if there are steps to do this work can you advice me?

thank a lot.