Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Access-list

Hi, I have been configuring access-list on a 2811 router to deny all traffic except TFTP. Right now, only the router who's IP adresse are in the ACL, can copy their running-config to the TFTP server. However, the router that is directly connected to the TFTP server, and on which interface the ACL is placed out, is enable to copy it's own running-config, even thow the ACL is not allowing his IP address (only those from the other routers in the network). Look like the routers is not passing it's own traffic in the ACL ?? Is thi possible ??.

4 REPLIES
Hall of Fame Super Gold

Re: Access-list

Can you post a network diagram and the config please?

New Member

Re: Access-list

Here is the topology and the runing-config of router named R2.

Its the R2 router that is able to copy to the TFTP server even though the access-list does not permit him to copy.

I hope this is not too confusing !!

Thanks for your answer.

Hall of Fame Super Gold

Re: Access-list

Just a test, but remove permit ip any any.

Have you tried using ip access-group TFTP in?

Re: Access-list

Hi,

Configure ip access-group TFTP in  in your interface and then check  and share your results !!

Regards

Ganesh.H

1093
Views
0
Helpful
4
Replies
CreatePlease to create content