Our forums are currently in maintenance mode and the ability to post is disabled. We will be back up and running as soon as possible. Thanks for your patience!

General discussion


for you cisco heads out there

By advancedgeek ·
I need a command that will allow me to give certain IP addresses (several of them) access to any port on my internal network. Basically what is happening is I have a legacy ftp program that has to run to order supplies. I am running this on a private ( network, nat'd behind a 2600 cisco router. I have all of the ftp ports open...but this legacy machine uses random ports over 1023 to finish the connection. If you know a different way to do this please add. I am in Iraq right now, and need to do this quickly. Plz help. :)

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by advancedgeek In reply to for you cisco heads out t ...

Point value changed by question poster.

Collapse -

by hozcanhan In reply to for you cisco heads out t ...

advancedgeek ! what a nick ...ok .. on this very site there documents on ACL where you can define precisely to permit specific users(IP) and ports . if you just read through you can do it . control list .....

Collapse -

by hozcanhan In reply to

you say you are advanced ? just do a search on access control list topics here and you have all the sample commands. we can't write them out here. how is the sit(uation) in iraq now ?

Collapse -

by advancedgeek In reply to for you cisco heads out t ...

I am on an EXTREMELY slow connection here in iraq...can someone link it for me...or just copy and paste the commands in here? I can't really look around this would take an hour. Thx

Collapse -

by mshavrov In reply to for you cisco heads out t ...

Would you post your router's config? Or send it to me. Without knowing your config it's hard to advice anything.

Michael Shavrov
CCNP, CCDP, CCSP, Cisco Voice, MCSE W2K, Security+,...

Collapse -

by yasirirfan In reply to for you cisco heads out t ...


You can use show ip cache flow command in your 2600 series router this will provides you the ip addess and the port number its using.

use this command to enable caching
ip route-cache flow
Enables NetFlow data collection on the interface.

show ip cache flow
Displays a summary of the NetFlow statistics.



Related Discussions

Related Forums