Link to home
Start Free TrialLog in
Avatar of dealvis
dealvisFlag for United States of America

asked on

Cisco Extended ACL - Correct ACE Syntax

Need to add access control entry (ACE) to extended access-list on Cisco Catalyst 3560 switch (IOS v12.2) that allows a laptop (10.0.0.32/8) to make a TELNET connection to a Host (192.168.0.205/24)

I entered the ACE like this and it does not work:
 30 permit tcp host 10.0.0.32 0.255.255.255 192.168.0.205 eq 23

The Cisco 'sh access-list 104' output for this ACE becomes this...look at the wierd subnet mask?
30 permit tcp host 10.0.0.32 0.87.255.50 192.168.0.205 eq telnet

Anyway could please refresh me on the correct ACE syntax to allow an individual Host to make a TELNET connection to another individual Host?
ASKER CERTIFIED SOLUTION
Avatar of John Meggers
John Meggers
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of dealvis

ASKER

Wow, so simple.  Don't I feel stupid.  Thanks  Very much, your ACE example was perfect.

20 permit tcp host 10.0.0.32 host 192.168.0.206 eq 23 log

Now our Apple Admin on VLAN 4 can telnet into the access layer switch on VLAN 2 to make changes to port settings for his users.  Thanks Again