Access-list

g-lacoursiere · ‎09-17-2009

Hi, I have been configuring access-list on a 2811 router to deny all traffic except TFTP. Right now, only the router who's IP adresse are in the ACL, can copy their running-config to the TFTP server. However, the router that is directly connected to the TFTP server, and on which interface the ACL is placed out, is enable to copy it's own running-config, even thow the ACL is not allowing his IP address (only those from the other routers in the network). Look like the routers is not passing it's own traffic in the ACL ?? Is thi possible ??.

Leo Laohoo · ‎09-17-2009

Can you post a network diagram and the config please?

g-lacoursiere · ‎09-17-2009

Here is the topology and the runing-config of router named R2.

Its the R2 router that is able to copy to the TFTP server even though the access-list does not permit him to copy.

I hope this is not too confusing !!

Thanks for your answer.

Leo Laohoo · ‎09-20-2009

Just a test, but remove permit ip any any.

Have you tried using ip access-group TFTP in?

Ganesh Hariharan · ‎01-11-2010

Hi,

Configure ip access-group TFTP in in your interface and then check and share your results !!

Regards

Ganesh.H