Хочется на 3620 (IOS 12.2) нарисовать acl, который бы запрещал все входящие tcp-connections, кроме тех, что от active ftp - на cisco.com искал, но безрезультатно - это реализуемо? -- Maxim Tuliuk WWW: http://www.primats.org.ua/~mt/ ICQ: 21134222 The bike is absolute freedom of moving =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message
On Wed, Mar 17, 2004 at 12:35:21PM +0200, Maxim Tuliuk wrote:
permit tcp any eq 20
On Wed, Mar 17, 2004 at 12:35:21PM +0200, Maxim Tuliuk wrote:
можно нарисовать так :
interface XXX XXX
ip access group test-in in
!
ip access-list extended test-in
permit tcp any any established
permit tcp
Сорри, пеперутал
On Wed, Mar 17, 2004 at 05:32:12PM +0200, Alexey Balabushevich wrote:
permit tcp
-- Alexey Balabushevich nic-hdl: AB433-RIPE =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message
participants (3)
-
Alexey Balabushevich -
Maxim Tuliuk -
Vitaly Shugaylo