Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Dynamic ACLs on any IOS release?

One of our vendors uses DNS host names to advertise the IP addresses for certain servers.  the IP addresses for those server seem to be changing quite frequently.

Is there any way in any router or ASA release to dynamically adjust ACLs to compensate for that?  I tried to use a DNS host name in a simple ACL and the name is resolved and the IP address used instead of the host name.

I assume this is not possible, but I figured I'd ask the esperts here.

thanks

Joerg

Everyone's tags (4)
1 REPLY

Re: Dynamic ACLs on any IOS release?

Hi,

The ACL can only reference to IP not to name.

If the server's address change they change within a range correct?

So you can configure the ACL to point to the range instead than the single IP.

i.e.

If the server 1.1.1.1 switches IP between 1.1.1.1-1.1.1.14

You can have your ACL point to 1.1.1.0/28

Just a thought.

Federico.

294
Views
0
Helpful
1
Replies
CreatePlease to create content