cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
261
Views
0
Helpful
3
Replies

Access-lists

rickyt00
Level 1
Level 1

I am trying to contain the blaster\nachi worm with access list. My router is getting hammered, and I would like to block the ports before it gets to the router but I all have is WS-C2924C-XL-EN, WS-5000, WS-1924-EN, WS-2980G's. The 5000 has no routing capabilities, so I set a 2924 up before the traffic hits the router and used access lists on it but it is only catching very few of them. Am I missing something, or were can I find out what switches support access lists. Thanks for your help.

3 Replies 3

deilert
Level 6
Level 6

what does your acl look like and how is it applied ?

access-list 115 deny icmp any any echo

access-list 115 deny icmp any any echo-reply

access-list 115 deny udp any any eq 69

access-list 115 deny tcp any any eq 135

access-list 115 deny udp any any eq 135

access-list 115 deny tcp any any eq 137

access-list 115 deny udp any any eq 137

access-list 115 deny tcp any any eq 138

access-list 115 deny udp any any eq 138

access-list 115 deny tcp any any eq 139

access-list 115 deny udp any any eq 139

access-list 115 deny tcp any any eq 445

access-list 115 deny tcp any any eq 593

access-list 115 deny udp any any eq 593

access-list 115 deny tcp any any eq 707

access-list 115 deny tcp any any eq 4444

access-list 115 permit ip any any

int vlan 1

no ip unreachables

ip access-group 115 in

ip access-group 115 out

rajesh444
Level 1
Level 1

2900 XL series switches do not support ACLs.

Please refer to the following conversation:

Title: ACL on 2924

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.ee9b24e/0#selected_message

Regards,

Rajesh

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: