Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Access-lists

I am trying to contain the blaster\nachi worm with access list. My router is getting hammered, and I would like to block the ports before it gets to the router but I all have is WS-C2924C-XL-EN, WS-5000, WS-1924-EN, WS-2980G's. The 5000 has no routing capabilities, so I set a 2924 up before the traffic hits the router and used access lists on it but it is only catching very few of them. Am I missing something, or were can I find out what switches support access lists. Thanks for your help.

3 REPLIES
Silver

Re: Access-lists

what does your acl look like and how is it applied ?

New Member

Re: Access-lists

access-list 115 deny icmp any any echo

access-list 115 deny icmp any any echo-reply

access-list 115 deny udp any any eq 69

access-list 115 deny tcp any any eq 135

access-list 115 deny udp any any eq 135

access-list 115 deny tcp any any eq 137

access-list 115 deny udp any any eq 137

access-list 115 deny tcp any any eq 138

access-list 115 deny udp any any eq 138

access-list 115 deny tcp any any eq 139

access-list 115 deny udp any any eq 139

access-list 115 deny tcp any any eq 445

access-list 115 deny tcp any any eq 593

access-list 115 deny udp any any eq 593

access-list 115 deny tcp any any eq 707

access-list 115 deny tcp any any eq 4444

access-list 115 permit ip any any

int vlan 1

no ip unreachables

ip access-group 115 in

ip access-group 115 out

New Member

Re: Access-lists

2900 XL series switches do not support ACLs.

Please refer to the following conversation:

Title: ACL on 2924

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.ee9b24e/0#selected_message

Regards,

Rajesh

94
Views
0
Helpful
3
Replies
CreatePlease to create content