Tutorial No 9 Implementing Extended ACL Scenario 1

Practice ACL Configuration 

This Tutorial will Show you how to Work with Extended ACL

1. First Of all i will Configure all routers and hosts with the following ip addresses.

router0 fa0/0 172.16.10.1/24  

router0 s 2/0 192.168.4.5/30

router1 fa0/0 172.30.10.1/24 

router1 s2/0 192.168.4.6/30

pc0 172.16.10.5/24

pc1 172.30.10.20/24

Set the clock rate to 9600.

2) Configure RIP on both routers so there is full reach-ability to and from all networks.

commands:

Router0:
 router rip
 version 2
 network 172.16.0.0
 network 192.168.4.0

Router1:
router rip
 version 2
 network 172.30.0.0
 network 192.168.4.0

3) Verify that all routers and hosts can ping all interfaces. Do at your Own.

4) Deny all telnet sessions coming in on router0's 2/0 interface. This will deny telnet sessions from both router1 and pc1. Permit all other traffic. Use "101" as the number for the ACL. Apply the ACL to the appropriate interface.

Commands:

access-list 101 deny tcp any any eq telnet
access-list 101 permit ip any any

5) Verify that the ACL is working.

And Bingo My ACL is working. That's it.

Read More

Tutorial No 9 Implementing Standard ACL.

 Standard ACL.

Hello guys, How you doing, Hope you all are good.

Today i'm going to take out ACL that is standard and extended. I will be teaching that in two separate tutorials. let's take standard ACL first. This topology represents a simple network using three routers.  Traffic from a specific host will be filtered.

      

Well, i m using networks of my choice you can use your's. this is just a topology.                        

• Assign IP address to every device.
• Let’s Ping all pc with each other to see whether created topology works fine.
• PC0-PC1

                     

• PCO-PC3

           

• Ping request is successfull that means network is ok. Let’s create ACL Now that will deny all packets from PC 1 from reaching all hosts in the 192.168.1.0/24 network but allow all other connectivity. I’m using “1" as the ACL number.  And then I applied the ACL to Router0, at interface fa 0/0. Well if you want to restrict any other network then just go to the gateway of the network or at the interface from where traffic is entering into that specific network and on that interface apply your ACL.
• Commands:

·         access-list 1 deny host 192.168.2.2

·         access-list 1 permit any

• Verifying ACL.

Pinging from PC0 –PC1

              

Request for ping has failed that means that standard ACL is successfully implemented. Thank you for Visit. If you like it then don't forget to comment and share. if you need this topology mention your id i will send it to you.

Read More