Page 1 of 1

access list problem

Posted: Fri Aug 03, 2018 8:12 am
by ercole77
Hi guys
please help me to understand how access lists work.
My goal is to set an access list for a VPN user that

- permits access only to some specific IP addresses
- deny access to all other IPs and subnets

I have created 2 entries

1 PASS Allowed IP1 Priority 100 (ipv4) DstIPv4=192.168.0.1
2 Discard Deny all Priority 200 (ether)*

In my meaning these chained rules should ensure access to 192.168.0.1 and block all other destinations.
But, in fact, all the traffic is blocked, even if i have allowed 192.168.0.1 with the first rule.

Am i missing some concepts?

Re: access list problem

Posted: Wed Sep 05, 2018 7:16 am
by thisjun
Are you really want to allow packets only destinated to 192.168.0.1?
Do you want to waste packets from 192.168.0.1?