The following is an running config from a 2811 router in a production environment that is linked to another 2811 at another office via ppp serial link. Each site has it's own connection to the internet, this one supposedly via a DSL modem in bridged mode. So there should be no other hardware blocking ports at this site.
The office needs to forward port 8085 to a specific workstation for a mobile application to connect with their dental software.
According to "show access-lists" the rule "permit tcp any host xx.xx.xx.130 eq 8085 log" from the access list "sdm_dialer0_in" is getting hit every time I probe the port from outside the office. Doesn't this mean the packets should be getting through? Why is the port still showing up as blocked?
For testing perposes I created a NAT rule to send traffic on port 8085 to the server at 192.168.0.201. IP 192.168.0.202 is setup to respond to terminal services.
to achieve this either use a text editor to edit the ACL with the modified statement then delete the ACL and copy paste the new modified one or do a sh access-list and you shoulmd see line numbers on the far left for each statement then to modify enter in named ACL mode:
ip access-list extended 100
no xx where xx is the line number of wrong statement
xx permit tcp 192.168.0.201 eq 8085 host xx.xx.xx.130
then sh access-list to verify and then try to connect and let us know.
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.