Access list does not work

I want that no package would leave f0/0 (R2).

Here is my configuration:

R1:

!

interface FastEthernet0/0

IP 192.168.1.1 255.255.255.0

!

R2:

!

interface FastEthernet0/0

IP 192.168.1.2 255.255.255.0

IP access-group 101 out

!

access-list 101 deny ip any one

!

Given the configs shown in the original post R2 will be able to ping to R1 and I guess this (or something very similar) is what brings the original poster said that the ACL does not work.

The problem here is that a list of access applied on an interface will not process the traffic generated by the router itself. The illustrious ACL will be very effective in preventing transit traffic (traffic that came from somewhere to R2 and must be DISPATCHED f0/0). But it will not work on the packages generated by R2.

HTH

Rick

Tags: Cisco Network

Similar Questions

  • Portege R500 - TrueSuite Access manager does not work with IE 8

    TrueSuite Access Manager does not work with Internet Explorer 8

    Version:
    Internet Explorer: 8.0.6001.18702
    TrueSuite Access Manager 2.1.23.0

    Any idea?

    Thankx
    Robert

    Hello!

    Which laptop computer and operating system you have?
    And what do you mean with it doesn t work? You get an error message or something else?

    You must give us a little more information. Otherwise, we can t help you my friend.

    Good bye

  • VeriSoft Access Manager does not work on Windows 7.

    VeriSoft Access Manager does not work on Windows 7. It worked on Windows Vista and 7 RC, but it now gives the error "this program blocked to compatibility problems. VeriSoft Access Manager is not compatible with this version of Windows. For more information, contact Cognizance Corporation. "He said that the problem file is AsGHost.exe. Any ideas how to solve this considereing that has worked in Windows 7 Release Candidate?

    This software is not yet compatible with Windows 7. I met the same problem. You must use different software to fingerprints. DigitalPersona works very well and can be downloaded from the HP website. Here is the link...

    http://h10025.www1.HP.com/ewfrf/wc/genericSoftwareDownloadIndex?LC=en&DLC=en&cc=us&softwareitem=ob-56930-1

  • Ipv6 access list does not apply autonomous Aironet 3602I-E

    As you can see in the attached config I configured two SSID (2G & 5 G) for a third (2G only) SSID and PEAP WPA2-Ent on the vlan 2 for 'poor team access as guest '.

    Basically I forced the Dot11Radio0.2 interface in the Group of deck 1 to get all three SSIDS on vlan 1 (since I want just a quick way and dirty to allow its customers access to the internet, without having to configure a vlan separate everywhere).

    The guest SSID (XX COMMENTS) allows tkip in addition to BSE and uses a PSK rather than PEAP. Access lists configured on Dot11Radio0.2 IPv4 allows clients connected to this SSID get an IP by DHCP, use the DNS servers on the local network and access the internet. All other traffic for the local network is blocked by access lists guest_ingress and guest_egress.

    This all works very well, ipv4 is blocked for guests invited as expected. However, ipv6 is something different. For some reason, the ipv6 access list is completely ignored.

    Because I don't need ipv6 for guest access, I thought that I have completely block and do with it. As you can see I have this set:

    interface Dot11Radio0.2
    guest_ingress6 filter IPv6 traffic in
    guest_egress6 filter IPv6 traffic on

    and these ipv6 access lists have a rule of "refuse a whole" only. Yet, the XX COMMENTS SSID connected client gets an ipv6 address of the server on the LAN DHCP6 and has full connectivity. For ipv4, that I had to explicitly allow DHCP packets to the client not even get an IP, so the ipv6 access lists are not clearly applied.

    No matter if I move the access interface Dot11Radio0 instead lists, they don't do anything. I thought that maybe I should add a "enable ipv6" on the Dot11Radio0.2 interface (even if ipv6 traffic was very good, even where it shouldn't), but when I set "enable ipv6" Dot11Radio0 or Dot11Radio0.2 the radio goes into a sort of infinite loop of reset:

    000261: Sep 23 2016 22:32:50.512 it IS: % DOT11-5-EXPECTED_RADIO_RESET: restart Radio Dot11Radio0 interface due to the reset of the interface
    000262: Sep 23 2016 22:32:50.516 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
    000263: Sep 23 2016 22:32:50.524 it IS: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
    000264: Sep 23 2016 22:32:51.516 it IS: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs
    000265: Sep 23 2016 22:32:51.560 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
    000266: Sep 23 2016 22:32:51.568 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
    000267: Sep 23 2016 22:32:51.576 it IS: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
    000268: Sep 23 2016 22:32:52.608 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
    000269: Sep 23 2016 22:32:53.608 it IS: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to
    000270: 22:32:53.608 Sep 23, 2016 it IS: % DOT11-5-EXPECTED_RADIO_RESET: restart Radio Dot11Radio0 interface due to the reset of the interface
    000271: Sep 23 2016 22:32:53.612 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
    etc.

    In addition, when creating a list like this ipv6 access:

    guest_egress6 IPv6 access list
    refuse an entire ipv6

    The other is automatically created:

    IPv6-guest_egress6 role-based access list
    refuse an entire ipv6

    A deletion also removes the other.

    What is happening with these ipv6 ACLs, why they are not blocking all traffic? Why do I get an acl "role-based" too? Is associated it with?

    Is there a another way to kill just any ipv6 on the SSID of COMMENTS XX traffic while leaving alone on others? That's all I need at this stage. If the ipv6 ACL do not work, perhaps this can be done (ab) using a service-policy or policy routing? I'm ready to creative solutions :)

    PS. I know this is not the recommended method to configure a guest SSID, but it should still work IMO.

    You have encountered a bug I discovered a few months ago (CSCva17063), in your case, the workaround is to apply the ACL on the physical rather than the void interface interface (because you want to completely block IPv6 in any case). I write (more) my conclusions regarding the traffic that refusal on autonomous APs in a blogpost, might be interesting for you to read as well.

    Remember that the access point used as a bridge between the wired infrastructure and wireless, not as a router. There's some IOS routing of commands (like the "enable IPv6" command you pointed out) , but these are not the characteristics that should be used or need to be enabled on an access point.

    Because the networks internal and customer spend somewhere else, I would perform filtering on this device instead. Also sub gi0.2 interface is missing from your configuration, so I do not think that access as a guest is currently working at all?

    Please rate helpful messages... :-)

  • Windows 8 reading list does not work with the programs desktop or web browsers in the Office

    * Original title: playlist of Windows 8

    Hello

    What a waste of time, this app is!

    -"Playlist does not work with programs office or web browsers in the Office! This raises the question: what will work with?

    I wish I knew.

    Thank you

    Chris

    Hi Chris,

    Playlist does not work with the programs office or web browsers in the design office.

    For more information, see the links.

    http://Windows.Microsoft.com/en-us/Windows-8/reading-list-app-FAQ

    http://Windows.Microsoft.com/en-us/Windows-8/share-to-reading-list

    Hope this information helps. If you have any questions, please let us know.

  • arrow of the selection list does not work

    Run version 4.2 against database 11g.

    On one of my pages none of my page selection point lists are working properly.  When clicking on the arrow at the end of the selection in the list list does not open, but if you click within the field where the text is displayed, it will open.  I tried IE and Firefox and the result is the same on both browsers.  If anyone has seen this behavior before?

    After putting a few more space between list boxes, the problem solved.  I guess even if visually there is space between them, it was somehow a kind of overlap.

  • Vmware server Web Access 2 does not work

    Dear vmware community:

    First of all thank you for taking the time to read this.

    I have a problem that looks like this isn't the first time that this happens, Yes, I was still unable to find an adequate solution.

    We have vmware server 2 is installed on a Debian 5 machine. Until yesterday, it was working fine.

    Today, when I tried to access to via web browser as usual, the page not load (the browser would say 'done, but the name of the page says "Loading").

    We have one of the virtual machines that are configured to start automatically, and it does not work as expected. The other I can't handle because I can't have the vmrun run perhaps (related?). So far, the only things that doesn't seem to work is web access only.

    There is one thing to note: after a restart of the computer, or restart the vmware mgmt, the service called "VMware Virtual Infrastructure Web Access" would show anything (while other services say "done" at the end of each line).

    I saw other people with similar problems here, and generally the solution was to reinstall the vmware server all on this machine. I would avoid this of course.

    Did someone already experienced this? Where I can look for more information on the VMware VI Web Access service won't start not (I do not know where are stored the logs of this service, maybe that can help).

    Please let me know if I should add any information, such as newspapers, etc.

    Thank you in advance!

    Hello

    I would recommend you check carefully this post and this post another may also help.

    Have you checked the vmrun documentation? Take a look at the file that I downloaded on this post.

    I would like to know if one of my tips work for you (or not)

    Best wishes / Saludos.

    Pablo

    Please consider providing any useful answer. Thank you!! - Por favor considered premiar las useful responses. ¡¡MUCHAS gracias!

    Virtually noob blog

  • DA to select list does not work

    Hi friends,

    I have a two of my form fields.

    person ID < li >
    < li > manager name (selection list)

    I gave a value for the id of the person as '270' by default. So I need to write a dynamic action so that he'll be looking for the name of Manager according to the id of the person '270'.

    As my manager name is a type of list, select, I gave the following query in the definition of LOV from this point of
    select papf.full_name d, papf.person_id r
    from per_all_people_f papf,
         per_all_assignments_f paaf,
         per_all_people_f supf, hr_all_positions_f hapf, hr_all_organization_units haou
    where papf.business_group_id = 216  
    and papf.person_id = paaf.person_id and hapf.position_id=paaf.position_id and haou.organization_id=paaf.organization_id
    and  NVL(paaf.supervisor_id, papf.person_id) = supf.person_id
    and sysdate between papf.effective_start_date and papf.effective_end_date
    and sysdate between paaf.effective_start_date and paaf.effective_end_date
    and sysdate between supf.effective_start_date and supf.effective_end_date
    and sysdate between hapf.effective_start_date and hapf.effective_end_date
    and papf.person_type_id = 5145 
    order by 1   
    It comes from the DA, I wrote for the column id of person.

    For the real action, I gave as "Set value" and gave the following query
    select supf.full_name
    from per_all_people_f papf,
         per_all_assignments_f paaf,
         per_all_people_f supf, hr_all_positions_f hapf, hr_all_organization_units haou
    where papf.business_group_id = 216  
    and papf.person_id = paaf.person_id and hapf.position_id=paaf.position_id and haou.organization_id=paaf.organization_id
    and  NVL(paaf.supervisor_id, papf.person_id) = supf.person_id
    and sysdate between papf.effective_start_date and papf.effective_end_date
    and sysdate between paaf.effective_start_date and paaf.effective_end_date
    and sysdate between supf.effective_start_date and supf.effective_end_date
    and sysdate between hapf.effective_start_date and hapf.effective_end_date
    and papf.person_type_id = 5145 and papf.person_id = :P6_PERSON_ID
    Article submit page: P6_PERSON_ID

    Affected item: P6_MANAGER_NAME.

    Shortly after the loading of the page, the field of the crib should display the name of the Manager for the LOV '270' value that is in the element id of person. But it does not show the name in the selection list item.


    Suppose that, if the Manager's name is in "view only" means that it works, but if the manager name field is in LOV means, it does not fetch the value and it displays only the display null value in this area.

    I don't know why him DA does not work if the field is in LOV.

    Brgds,
    Mini

    Hey Mini,

    a page of type element "select list" always stores the return value (second column of your LOV) in the page element. So in your case, you actually rename the element of your page to P6_MANAGER_ID (to take into account that this is an ID) and change your 'Set Value' query for the papf.person_id

    Concerning
    Patrick
    -----------
    My Blog: http://www.inside-oracle-apex.com
    APEX Plug-Ins: http://apex.oracle.com/plugins
    Twitter: http://www.twitter.com/patrickwolf

  • FAMILY SAFETY ONLY ALLOW LIST DOES NOT WORK

    Microsoft has recently made some changes on the safety of the family who have had side effects. Some parameters have been swept away and one of them is the only list. I put two computers only have allowed, but they seem to work around and browse the inappropriate content. If I receive the settings by clicking on the check box to allow only, it does not, when I refresh or revisit it, the box remains unmarked. Please, Microsoft, difficulty this thing or get back to where it was.

    Microsoft control millions of computers using security for the family and they have the information in their servers. It is a huge responsibility and to smear our settings means a lot of damage to millions and millions of people out there. Am sure it will take a lot of time for many parents discover that their children have access to inappropriate content. I am against changes that were there, especially the Remover of accounts and simplify the security for the family.

    I have now found a work around for this problem;

    If the declaration for this child's account is disabled, the State of the checkbox allow list only saves as ticked. I showed this Microsoft technical support fault and am tracking its progress until complete correction is ready.

  • Satellite M40-307: accessibility utility does not work with the limited user account

    Hello everyone,

    I have a Satellite M40-307 (PSM44E), and I had a problem with the utility "accessibility", which displays an icon in the notification bar of Windows XP, to inform the user if the "Fn" key is active or not.

    This utility would not work for the administrator would not worry so much, because the administrator is supposed to know what he does. But the limited user doesn't have access, that bother anymore.

    In Administrator, this utility works quite well. But during a session of limited user, if I try to launch it in [runas / user: admin "C:\Program Files\TOSHIBA\Windows Utilities\TACSPROP.exe"],
    I am replied that the file TCMSVR. DLL is not found. If I launch normally, a message tells me that this utility requires that I am logged on as administrator.

    So, what can I do to use this utility normally, i.e. in a limited user Sessiona? *

    Hello

    Well, you should try to activate the rights for the TACSPROP.exe.
    To do this, you must enter the operating system as an administrator.
    Choose the application, right click. There is a Security tab. Here, you need to activate the permissions for all users.

  • access key does not work

    When I press the firefox on my keyboard shortcut key, that it does not start. It just display the file firefox with all its extrentions.

    I could show you, but this does not allow to send me a screen shot is

    It's the Firefox installation folder. Take a look at the parameters in the software keyboard to this button, if you add the 'path' for this button by adding \firefox.exe to the end that you should be able to get Firefox to launch.

    Sorry, I use base P/S-2 keyboards (IBM M-series buckling spring "clicky" now made by Unisys) that work without operating system who need to load the USB drivers or other software just to be able to use a simple device such as a keyboard or a mouse. The basic P/S-2 devices operate in a command or DOS window, or when the operating system does not start or is not yet installed; a habit I developed in the days before the BIOS 1 MB saw the day and contained chips based USB drivers.

  • Windows Live Mail safe sender list does not work.

    When I click on the safe senders list, he said:

    'Safe List Denders Only mail from people or domains on your safe senders list is delivered to your mailbox. »

    I click on this. Also, I click on "Also trust e-mail from my Contacts" and "automatically add people I e-mail to the safe senders list.

    Now that sounds pretty clear to me that no spam must be appear in my Inbox. And I still continue to receive unwanted mail (32 today).

    What can I do to fix this?   (I have Windows Live Mail and am on Windows 7) Thank you.

    ... 'Safe List Denders Only mail from people or domains on your safe senders list is delivered to your mailbox. »

    I click on this... Words.

    I use the version of Windows Live Mail 2011.
    The formulations in your safe senders list are not the same as mine. (See screenshot at the end of the answer.)

    You don't "click on it. You must enter the addresses of the list in the box of > then click on add > and then click OK.

    Do not check the "add automatically people I e-mail to the safe senders list" for reasons of security. What makes you so sure that people that email you are "safe"?

  • Site drop-down list does not work - DW CC 2015.1

    Someone knows how to fix DW so that the drop-down list of sites appears in the files Panel? When I click on the drop down menu, I see he's trying to do * something * but I don't have the drop-down list. I can work around it by going to the Site > Manage Sites, but I prefer to use the drop-down list.  Any help is appreciated.

    Thank you

    Tim

    I filed a bug to the engineering team to watch, referring to this thread and the other (site drop-down list on the files tab too short?).

  • Question Type "Item in the list" does not work

    I tried to give the type of an element to the list item
    After compiling, I run the form and I get this:

    NoClassDefFoundError
    Java 10.7.2.11 plugin
    Version JRE 1.6.0_31 - b05 Java hotspot Client VM

    Would it be because of something inconsistent in my versions? But this is the first time it happens (only with the elements of the list)

    Database: Oracle 10gXE
    Event: 10.1.2.0.2
    JRE: 1.6.0_31
    JInitiator: 1.3.1.22

    Thanks in advance!

    This error should only appear when you use a list item with the type list of the combobox value. A combobox in forms is a listitem where you can also enter your own text. If you have need a drop-down list, on property liststyle poplist. It also works without patch. If you really need the combobox, patch.

  • C855 satellite - internet access Wireless does not work after upgrade to Win8

    Hello can someone help me?

    I have Toshiba Satellite C855 1HU. I just upgrade to Windows 8 and now I have no internet Wi - Fi.
    I don't see the wireless icon.
    I have downloaded the widipl - 20121025100952.zip it din't work.

    Means Enyone help me?

    Hello

    You laptop was equipped with card Realtek Wlan RTL8723AE
    I assume that you have installed the wrong driver Wlan.

    Check and try to install the Realtek Wlan driver released for the Win 7 system

Maybe you are looking for

  • Cannot load sites http but https are ok - as impossible to connect to the App store

    Hi people, for the first time I have a serious problem with my Mac and 10.8.5 and I hope to find some help here. The problem: All of a sudden (no idea of what happened, why it happened) I can not open Web sites beginning with http, for example http:/

  • Satellite A100-920 - blocked at startup

    HelloAfter a recent BIOS upgrade, reboot the laptop, I'm stuck at the start with F2 or F12 options page. But I can't go any further, the 'blue' bar showing that the reading of the boot is still in a third and stopped. I tried removing the battery and

  • Print where I don't have Wifi

    I just bought a HP Officejet 6700 Premium All In One Printer. If I put this printer I don't have WiFi. I was hoping to be able to print simply by connecting the USB cable to my computer. This does not work well... I do something wrong or isn't it pos

  • is it possible to fix a cracked outer case/shell?

    I have a HP G50 and my outer case is cracked all the way across the length of the computer.  It is split at the base where it pivots to open and close.  So even if I open my laptop, the screen now breaks down at the base and I can see inside the scre

  • Static of the speaker and his helmet

    Sound problems Until today my speakers and headphones worked fine - I made no changes to my computer but suddenly all I get when I try to play any sound is very static. I checked in the control panel and the volume settings, but the computer does not