Chapter 13
Identifying Traffic with Access Lists
Access List Overview
If you want to allow an outside host to access an inside host, you can apply an inbound access list on the
outside interface. You need to specify the translated address of the inside host in the access list because
that address is the address that can be used on the outside network (see
Figure
13-2).
Figure 13-2
IP Addresses in Access Lists: NAT used for Destination Addresses
209.165.200.225
ACL
Permit from
209.165.200.225
to
209.165.201.5
Outside
Inside
10.1.1.34
209.165.201.5
Static NAT
See the following commands for this example:
hostname(config)# access-list OUTSIDE extended permit ip host 209.165.200.225 host
209.165.201.5
hostname(config)# access-group OUTSIDE in interface outside
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
13-4
OL-20748-01