Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Question on ACL config.

Hello's

I have an ACL question. I'm trying to set up an acl that will restrict 1 computer to accessing ONLY a website such as UPS.com. On doing an nslookup or Whois for ups.com I find www.ups.com answers to these IP addresses. 153.2.224.50

153.2.228.50

However, browsing to UPS.com does not necessarily connect to these IP addresses. It seems UPS.com is using some load balancing feature where it (ups.com) could resolve to several different IP's hosted it seems by akamai.

What is the best way to establish this lock down? Machine should only get to ups.com, however, UPS.com is not easily resolvable.

thanks

Sky.

3 REPLIES
Hall of Fame Super Silver

Re: Question on ACL config.

New Member

Re: Question on ACL config.

Thanks for your quick response. I'll check out the url.

Sky

New Member

Re: Question on ACL config.

Hello,

I looked at the url and had a couple of follow up questions.

I'm wondering how the ip domain lookup would work in my scenario. If the user requests www.ups.com his computer will resolve the fqdn to whatever response the dns server hands back, which could be different each time the user visits ups.com

Even if i have enabled ip domain lookup and used the FQDN in the access list how would this help my situation? If the router does a lookup for www.ups.com, the router too may get a different IP address for ups.com than the user.

Does the question make sense?

141
Views
0
Helpful
3
Replies