TCP Port ACL rules M4300 Help

Hi Mikeemikew,

I am not sure how the ACL is bound, but there are several ways of doing it. I think, the easiest is to bind it against a VLAN, so that it applies to all devices.

I have tested this here in my lab for you, and can confirm, that the following table works:

access-list 101 permit tcp host 192.168.50.203 192.168.200.0 0.0.0.255 eq 8843
access-list 101 permit tcp host 192.168.50.203 192.168.200.0 0.0.0.255 eq 8880
access-list 101 deny ip 192.168.50.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 101 deny ip 192.168.50.0 0.0.0.255 192.168.60.0 0.0.0.255
access-list 101 deny ip 192.168.50.0 0.0.0.255 192.168.100.0 0.0.0.255
access-list 101 deny ip 192.168.50.0 0.0.0.255 192.168.200.0 0.0.0.255
access-list 101 permit ip any any
ip access-group 101 vlan 50 in 1

In the GUI, this would be as followed:

Then, you have to bind it against the vlan, as followed:

As example, my testing:

Give that a try, and it should work just fine 👌.

Once it works, if you can accept this as a solution.

If it doesn't work, can you share your Tech Support file, happy to have a look at it.

You can retrieve your TS as followed:

Mike