?
Solved

Firewalling 101 I need to pass dns, dhcp pxe icmp and ghost but nothing else

Posted on 2007-10-01
5
Medium Priority
?
324 Views
Last Modified: 2013-11-16
I have vlans and am using access-lists.  

We have a vlan 500 that has dns, dhcp pxe icmp and ghost.  We have vlan 200 that is going to be exposed to nasty things like viruses perhaps.  We need to get access to dns, dhcp pxe icmp and ghost on vlan 200  but do not want stuff like virus & attacks to get to vlan 500.

As a test enabled all into vlan 200 and enabled dns & icmp into 500.   I can not ping from 200 to 500

What are the bare minimum ports I need to communicate from dns, dhcp pxe icmp and ghost  ?

Thank you all

D  
0
Comment
Question by:itguy411
  • 3
  • 2
5 Comments
 
LVL 16

Accepted Solution

by:
poweruser32 earned 1500 total points
ID: 19992517
you cannot ping,can you ping either by name or ip address,also has the v lan 200 a default gateway assigned?
0
 

Author Comment

by:itguy411
ID: 19992551
It works until I put in the access list.  When I remove it it starts again.

Confused am I,

Yoda  
0
 
LVL 16

Expert Comment

by:poweruser32
ID: 19992712
try open port 53 anyway for dns and see
0
 

Author Comment

by:itguy411
ID: 19993088
I was pinging by ip.  

Now really confused am I.

Yoda

0
 

Author Comment

by:itguy411
ID: 19999852
What port is icmp ?  Ping is icmp ?
it is udp right ?
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question