Solved

Access List

Posted on 2008-09-30
2
336 Views
Last Modified: 2012-05-05
I created a Access-list called blockserver,

extended ip access list blockserver
permit ip host 190.150.142.70 host 192.168.62.27
deny ip host 192.168.62.27 host 190.150.142.70
permit ip any any

Also the cisco has two gateways 190.150.142.99 and 192.168.62.1

When I ping from computer (192.168.62.27) to computer (190.150.142.70), the cisco blocks.  Which I want. The deny statement matches 4 times.

However, when I ping from computer(190.150.142.70) to computer (192.168.62.27), the cisco also blocks.  Which I do not want.  The permit statement matches 4 times and the deny matches 4 times.

I want to be able to let computer (190.150.142.70) ping computer (192.168.62.27) and stop computer (192.168.62.27)  from pinging computer (190.150.142.70).
0
Comment
Question by:kevingattis
2 Comments
 
LVL 33

Accepted Solution

by:
MikeKane earned 125 total points
Comment Utility
You would need to allow icmp echo-reply back through.   The DENY is catching the echo and blocking it.

try this instead:
permit ip host 190.150.142.70 host 192.168.62.27
permit icmp host 192.168.62.27 host 190.150.142.70 echo-reply
deny ip host 192.168.62.27 host 190.150.142.70
permit ip any any
0
 
LVL 12

Expert Comment

by:Pugglewuggle
Comment Utility
That is right. You need an ACE allowing pings to get through. echo-reply should work but if it doesn't just add another rule that uses echo and that should do it.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

There are many useful and sometimes not well documented or forgotten IOS or ASA/PIX commands. See IPE article here , there was also one on PacketU and on Cisco Tips & Tricks. Below are my favorites. I give also a few most often used for Cisco IPS an…
This is about downgrading PIX Version 8.0(4) & ASDM 6.1(5) to PIX 7.2(4) and ASDM 5.2(4) but with only 64MB RAM and 16MB flash. Background: You have a Cisco Pix 515E which was running on PIX 7.2(4) and its supporting ASDM 5.2(4) without any i…
This video discusses moving either the default database or any database to a new volume.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now