Cisco Access Control List (ACLs) Samples

By Joshua Erdman
Digital Foundation, inc.

Reusing our example:
Assumptions:
internal network: 63.36.9.0

access-list 101 - Applied to traffic leaving the office (outgoing)

access-list 102 - Applied to traffic entering the office (incoming)

Permit Employees to Web Browse
access-list 101 permit tcp 63.36.9.0 0.0.0.255 any eq 80

access-list 101 permit tcp 63.36.9.0 0.0.0.255 any eq 443

Permit incomming traffic for an established connection - You will always need this line if you plan to filter incomming packets.
access-list 102 permit tcp any 63.36.9.0 0.0.0.255 established

Permit incoming ICMP Ping Requests and incoming response
!Configure ICMP messages (echo:8, echo-reply:0, Dest unreach:3, TTL Exceeded:11)
access-list 102 permit icmp any any echo
access-list 102 permit icmp any any echo-reply

Permit Outgoing ICMP Ping Requests
!Configure ICMP messages (echo:8, echo-reply:0, Dest unreach:3, TTL Exceeded:11)
access-list 102 permit icmp any any echo

Article last reviewed: 03/23/2005

del.icio.us

Created by: Digital Foundation, inc.

All content of the NetworkClue website is copyrighted. Articles, notes, outlines, and all other materials may not be stored on the Internet or sold or placed by themselves or with other material in any electronic or printed format in whole or part. However materials may be referenced by links to the site.