Tutorial No 9 Implementing Extended ACL Scenario 1

Practice ACL Configuration 

This Tutorial will Show you how to Work with Extended ACL

1. First Of all i will Configure all routers and hosts with the following ip addresses.

router0 fa0/0 172.16.10.1/24  

router0 s 2/0 192.168.4.5/30

router1 fa0/0 172.30.10.1/24 

router1 s2/0 192.168.4.6/30

pc0 172.16.10.5/24

pc1 172.30.10.20/24

Set the clock rate to 9600.

2) Configure RIP on both routers so there is full reach-ability to and from all networks.

commands:

Router0:
 router rip
 version 2
 network 172.16.0.0
 network 192.168.4.0

Router1:
router rip
 version 2
 network 172.30.0.0
 network 192.168.4.0

3) Verify that all routers and hosts can ping all interfaces. Do at your Own.

4) Deny all telnet sessions coming in on router0's 2/0 interface. This will deny telnet sessions from both router1 and pc1. Permit all other traffic. Use "101" as the number for the ACL. Apply the ACL to the appropriate interface.

Commands:

access-list 101 deny tcp any any eq telnet
access-list 101 permit ip any any

5) Verify that the ACL is working.

And Bingo My ACL is working. That's it.