Cisco Catalyst 6500 Series - Page 189

10-9
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
OL-6392-01
Chapter 10 Controlling Network Access with Access Control Lists
Access Control List Overview
If you want to allow an outside host to access an inside host, you can apply an inbound ACL on the
outside interface. You need to specify the translated address of the inside host in the ACL because that
address is the address that can be used on the outside network. (See Figure 10-2.)
Figure 10-2 IP Addresses in ACLs: NAT used for Destination Addresses
See the following commands for this example:
FWSM/contexta(config)# access-list OUTSIDE extended permit ip host 209.165.200.225 host
209.165.201.5
FWSM/contexta(config)# access-group OUTSIDE in interface outside
209.165.200.225
Inside
Outside
Static NAT
209.165.201.510.1.1.34
ACL
Permit from 209.165.200.225 to 209.165.201.5
104636