Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IP extended access list commands using tcp port filtering

If I use the IP extended command to filter to tcp port level e.g

access-list 101 permit tcp host source IP address host destination IP address eq 23 , and apply it to a port using incoming access group , does the port number 23 apply to the source IP address , destination IP address or both for the filter to work ?

1 REPLY
Anonymous
N/A

Re: IP extended access list commands using tcp port filtering

access-list 101 permit tcp host x.x.x.x host y.y.y.y eq 23

!

int XX

ip access-list 101 in

Means that packets incoming on that

interface, with a source address of

x.x.x.x and a destination address of

y.y.y.y with the telnet port (23),

will be denied.

371
Views
0
Helpful
1
Replies
CreatePlease login to create content