+ Post New Thread
Results 1 to 5 of 5
Wireless Networks Thread, 3com 4500g ACL issues in Technical; i currently have a lab that is on it's own VLAN. This lab needs to have access to port 80 ...
  1. #1

    Join Date
    Sep 2009
    Posts
    3
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    3com 4500g ACL issues

    i currently have a lab that is on it's own VLAN. This lab needs to have access to port 80 and port 443 only. But my main network needs to have full access to the server on this network. 172.16.253.2 /24

    I have the following acl on my core routed switch and it was working but now it just stopped. I can no longer access the server at all. Can someone help me please??

    here's the ACL

    Acl number 3100
    rule 0 permit tcp source 172.16.253.2 0 destination 10.0.0.0 0.255.255.255
    rule 1 permit tcp source 10.0.0.0 0.255.255.255 destination 172.16.253.2 0
    rule 5 permit tcp source 172.16.253.0 0.0.0.255 destination 10.69.0.1 0 destination-port eq www
    rule 10 permit tcp source 172.16.253.0 0.0.0.255 destination 10.69.0.1 0 destination-port eq 443
    rule 15 deny ip source 172.16.253.0 0.0.0.255 destination 10.0.0.0 0.255.255.255

    From what I can tell the lab computer aren't able to access anything on the network except computers on their own subnet and the internet so that part is working fine but I need to be able to access the server from anywhere on our 10.0.0.0 network.

  2. #2

    Join Date
    Dec 2007
    Posts
    885
    Thank Post
    92
    Thanked 165 Times in 140 Posts
    Rep Power
    50
    Not read the ACL in depth etc, but are the servers/network you trying to access on the default VLAN1?

    VLAN1 is only for management of switches (once you start adding additional VLANs) and not accessible from any other VLAN.

    You may have to create an additional VLAN for 172.16.253.2 /24 and another for 10.0.0.0 network.

    Also, you have to apply the ACL Rule(s) to the appropriate port(s) on the Switch.

  3. #3

    Join Date
    Sep 2009
    Posts
    3
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Yes as stated the lab is on it's own Vlan. Vlan 666 to be exact (this lab has MAC's in it and I'm not much of a MAC person).

  4. #4
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    38
    Can you tell us where on which interface you did place this ACL? knowing 3com 5500's it makes a huge difference

    bio..

  5. #5

    Join Date
    Sep 2009
    Posts
    3
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I have applied it to Gig 1/0/51. All of the lab traffic comes across this port. I wanted to apply it to the vlan but the switch doesn't have the commands available to do that. What's even stranger is that it was working for two months.



SHARE:
+ Post New Thread

Similar Threads

  1. 3Com VLAN Issues
    By boogster in forum Hardware
    Replies: 2
    Last Post: 8th February 2010, 08:22 AM
  2. 3com 4500G stacking
    By ezzauk in forum Wireless Networks
    Replies: 3
    Last Post: 17th August 2009, 11:59 PM
  3. 3com 4500G vlan-ing help
    By amfony in forum Wireless Networks
    Replies: 0
    Last Post: 15th May 2009, 07:41 AM
  4. ACL
    By kevin_lane in forum Coding
    Replies: 1
    Last Post: 19th December 2008, 07:09 PM
  5. 3Com 4500G VLAN Routing
    By ptenteges in forum Wireless Networks
    Replies: 1
    Last Post: 28th May 2008, 01:31 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •