Access-list TCP packets denied.

[Tagg72]

Hello,

I have a permit statement in my ACL - Access_in_2 permit tcp host X.X.X.1 host X.X.X.2 eq 1068 but I am getting the following denied statement,

Access_in_2 denied TCP Int_1/X.1(1068) -> Int_2/X.2(63055).

I am not sure why it is getting blocked. If anyone can tell me where I am going wrong, it would be greatly appreciated.

[Troy Jackson]

In this case, you will need to change the ACL to: 

Access_in_2 permit tcp host X.X.X.1 eq 1068 host X.X.X.2

.1 is sending traffic from port 1068 and is being blocked.

[Tagg72]

Thanks Troy.

[brmcmaho]

Also, since TCP is inherently bidirectional, check to make sure you're allowing both directions, either explicitly or using the "established" keyword in a separate ACL line.

[Tagg72]

Thanks :)