Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Cant access internet from UC540

Hi

i have install and configure UC540 with multiple VLAN, the( default VLAN-10.205.20.1) is access the internet but other VlAN 40 (10.205.40.1) i create can't access the net here the access-list in the router:

ip http server

ip http authentication local

ip http secure-server

ip http path flash:/gui

ip dns server

ip nat inside source list 1 interface Dialer0 overload

ip route 0.0.0.0 0.0.0.0 Dialer0

ip route 10.1.10.1 255.255.255.255 Integrated-Service-Engine0/0

ip route 10.205.40.0 255.255.255.0 Dialer0

!

access-list 1 remark SDM_ACL Category=2

access-list 1 permit 10.1.1.0 0.0.0.255

access-list 1 permit 10.205.20.0 0.0.0.255

access-list 1 permit 10.1.10.0 0.0.0.3

access-list 100 remark auto generated by SDM firewall configuration

access-list 100 remark SDM_ACL Category=1

access-list 100 deny   ip 10.205.20.0 0.0.0.255 any

access-list 100 deny   ip host 255.255.255.255 any

access-list 100 deny   ip 127.0.0.0 0.255.255.255 any

access-list 100 permit ip any any

access-list 101 remark auto generated by SDM firewall configuration##NO_ACE

access-list 101 remark SDM_ACL Category=1

access-list 101 permit tcp 10.205.30.0 0.0.0.255 eq 2000 any

access-list 101 permit udp 10.205.30.0 0.0.0.255 eq 2000 any

access-list 101 deny   ip 10.205.40.0 0.0.0.255 any

access-list 101 deny   ip 10.205.20.0 0.0.0.255 any

access-list 101 deny   ip 10.205.30.0 0.0.0.255 any

access-list 101 deny   ip host 255.255.255.255 any

access-list 101 deny   ip 127.0.0.0 0.255.255.255 any

access-list 101 permit ip any any

access-list 102 remark auto generated by SDM firewall configuration##NO_ACE

access-list 102 remark SDM_ACL Category=1

access-list 102 deny   ip 10.205.40.0 0.0.0.255 any

=============================================================================

UC540#sh access-lists

Standard IP access list 1

    10 permit 10.1.1.0, wildcard bits 0.0.0.255

    20 permit 10.205.20.0, wildcard bits 0.0.0.255 (23329

    30 permit 10.1.10.0, wildcard bits 0.0.0.3 (2421 matc

Extended IP access list 100

    10 deny ip 10.205.20.0 0.0.0.255 any

    20 deny ip host 255.255.255.255 any

    30 deny ip 127.0.0.0 0.255.255.255 any

    40 permit ip any any

Extended IP access list 101

    10 permit tcp 10.205.30.0 0.0.0.255 eq 2000 any

    20 permit udp 10.205.30.0 0.0.0.255 eq 2000 any

    30 deny ip 10.205.40.0 0.0.0.255 any

    40 deny ip 10.205.20.0 0.0.0.255 any

    50 deny ip 10.205.30.0 0.0.0.255 any

    60 deny ip host 255.255.255.255 any

    70 deny ip 127.0.0.0 0.255.255.255 any

    80 permit ip any any

Extended IP access list 102

    10 deny ip 10.205.40.0 0.0.0.255 any (995 matches)

    20 deny ip 10.1.10.0 0.0.0.3 any

    30 deny ip 10.205.30.0 0.0.0.255 any

    40 deny ip host 255.255.255.255 any

    50 deny ip 127.0.0.0 0.255.255.255 any

    60 permit ip any any (6886 matches)

Extended IP access list 103

    10 permit tcp 10.1.10.0 0.0.0.3 any eq 2000

    20 permit udp 10.1.10.0 0.0.0.3 any eq 2000

    30 deny ip 10.1.10.0 0.0.0.3 any

    40 deny ip 10.205.20.0 0.0.0.255 any

    50 deny ip host 255.255.255.255 any

    60 deny ip 127.0.0.0 0.255.255.255 any

    70 permit ip any any

Extended IP access list 104

    10 permit tcp 10.1.10.0 0.0.0.3 any eq 2000

    20 permit udp 10.1.10.0 0.0.0.3 any eq 2000

    30 deny ip 10.205.40.0 0.0.0.255 any

    40 deny ip 10.1.10.0 0.0.0.3 any

    50 deny ip 10.205.20.0 0.0.0.255 any

    60 deny ip host 255.255.255.255 any

    70 deny ip 127.0.0.0 0.255.255.255 any

    80 permit ip any any (209867 matches)

Extended IP access list 105

    10 deny ip 10.1.10.0 0.0.0.3 any

    20 deny ip 10.205.20.0 0.0.0.255 any

    30 deny ip 10.205.30.0 0.0.0.255 any

    40 deny ip host 255.255.255.255 any

    50 deny ip 127.0.0.0 0.255.255.255 any

    60 permit ip any any (13336 matches)

Extended IP access list 106

    10 deny ip 10.205.40.0 0.0.0.255 any

    20 deny ip 10.1.10.0 0.0.0.3 any

    30 deny ip 10.205.20.0 0.0.0.255 any

    40 deny ip 10.205.30.0 0.0.0.255 any

    50 permit udp host 213.42.20.20 eq domain any

    60 permit udp host 195.229.241.222 eq domain any

    70 permit icmp any any echo-reply

    80 permit icmp any any time-exceeded

    90 permit icmp any any unreachable (564 matches)

    100 deny ip 10.0.0.0 0.255.255.255 any

    110 deny ip 172.16.0.0 0.15.255.255 any

    120 deny ip 192.168.0.0 0.0.255.255 any

    130 deny ip 127.0.0.0 0.255.255.255 any

    140 deny ip host 255.255.255.255 any

    150 deny ip host 0.0.0.0 any

    160 deny ip any any log (431 matches)

access-list 102 deny   ip 10.1.10.0 0.0.0.3 any

access-list 102 deny   ip 10.205.30.0 0.0.0.255 any

access-list 102 deny   ip host 255.255.255.255 any

access-list 102 deny   ip 127.0.0.0 0.255.255.255 any

access-list 102 permit ip any any

access-list 103 remark auto generated by SDM firewall configuration##NO_ACE

access-list 103 remark SDM_ACL Category=1

access-list 103 permit tcp 10.1.10.0 0.0.0.3 any eq 2000

access-list 103 permit udp 10.1.10.0 0.0.0.3 any eq 2000

access-list 103 deny   ip 10.1.10.0 0.0.0.3 any

access-list 103 deny   ip 10.205.20.0 0.0.0.255 any

access-list 103 deny   ip host 255.255.255.255 any

access-list 103 deny   ip 127.0.0.0 0.255.255.255 any

access-list 103 permit ip any any

access-list 104 remark auto generated by SDM firewall configuration##NO_ACE

access-list 104 remark SDM_ACL Category=1

access-list 104 permit tcp 10.1.10.0 0.0.0.3 any eq 2000

access-list 104 permit udp 10.1.10.0 0.0.0.3 any eq 2000

access-list 104 deny   ip 10.205.40.0 0.0.0.255 any

access-list 104 deny   ip 10.1.10.0 0.0.0.3 any

access-list 104 deny   ip 10.205.20.0 0.0.0.255 any

access-list 104 deny   ip host 255.255.255.255 any

access-list 104 deny   ip 127.0.0.0 0.255.255.255 any

access-list 104 permit ip any any

access-list 105 remark auto generated by SDM firewall configuration##NO_ACE

access-list 105 remark SDM_ACL Category=1

access-list 105 deny   ip 10.1.10.0 0.0.0.3 any

access-list 105 deny   ip 10.205.20.0 0.0.0.255 any

access-list 105 deny   ip 10.205.30.0 0.0.0.255 any

access-list 105 deny   ip host 255.255.255.255 any

access-list 105 deny   ip 127.0.0.0 0.255.255.255 any

access-list 105 permit ip any any

access-list 106 remark auto generated by SDM firewall configuration##NO_ACE

#

access-list 106 remark SDM_ACL Category=1

access-list 106 deny   ip 10.205.40.0 0.0.0.255 any

access-list 106 deny   ip 10.1.10.0 0.0.0.3 any

access-list 106 deny   ip 10.205.20.0 0.0.0.255 any

access-list 106 deny   ip 10.205.30.0 0.0.0.255 any

access-list 106 permit udp host 213.42.20.20 eq domain any

access-list 106 permit udp host 195.229.241.222 eq domain any

access-list 106 permit icmp any any echo-reply

access-list 106 permit icmp any any time-exceeded

access-list 106 permit icmp any any unreachable

access-list 106 deny   ip 10.0.0.0 0.255.255.255 any

access-list 106 deny   ip 172.16.0.0 0.15.255.255 any

access-list 106 deny   ip 192.168.0.0 0.0.255.255 any

access-list 106 deny   ip 127.0.0.0 0.255.255.255 any

access-list 106 deny   ip host 255.255.255.255 any

access-list 106 deny   ip host 0.0.0.0 any

access-list 106 deny   ip any any log

dialer-list 1 protocol ip permit

!

421
Views
0
Helpful
0
Replies
CreatePlease to create content