duta
asked on
Cisco Router Access Control List commands
Dear experts:
I have a fictitious network as the following diagram.
Assume that currently I am using Router B (in the middle).
I wrote commands to execute the following two access controls:
1.To deny 192.168.1.99 access to 192.168.3.99:
(config)# access-list 10 deny 192.168.1.99 0.0.0.0
(config)# access-list 10 permit any
(config)# int s1/1
(config-if)# ip access-group 10 out
2. To deny 192.168.2.99 access to 192.168.1.99:
(config)# access-list 10 deny 192.168.2.99 0.0.0.0
(config)# access-list 10 permit any
(config)# int s1/0
(config-if)# ip access-group 10 out
I am not quite sure whether my commands are absolutely accurate. Can you experts kindly check my commands above? I am confused particualrly about "int s1/0" part. Can you give me some extra explanations regarding which serial piort IO I should use?
I am total novice. Please give me a complete command if my commands were inaccurate.
Thanks a lot!
--------------------------
e0: 192.168.1.1 e0/0: 192.168.2.1 e0/0: 192.168.3.1
s0: 192.168. s1/0: 192.168.4.2 s1/0: 192.168.5.2
s1/1: 192.168.5.1
e0 e0/0 e0/0
Router A s0 --------------------------
| | |
| | |
| | |
192.168.1.99 192.168.2.99 192.168.3.99
I have a fictitious network as the following diagram.
Assume that currently I am using Router B (in the middle).
I wrote commands to execute the following two access controls:
1.To deny 192.168.1.99 access to 192.168.3.99:
(config)# access-list 10 deny 192.168.1.99 0.0.0.0
(config)# access-list 10 permit any
(config)# int s1/1
(config-if)# ip access-group 10 out
2. To deny 192.168.2.99 access to 192.168.1.99:
(config)# access-list 10 deny 192.168.2.99 0.0.0.0
(config)# access-list 10 permit any
(config)# int s1/0
(config-if)# ip access-group 10 out
I am not quite sure whether my commands are absolutely accurate. Can you experts kindly check my commands above? I am confused particualrly about "int s1/0" part. Can you give me some extra explanations regarding which serial piort IO I should use?
I am total novice. Please give me a complete command if my commands were inaccurate.
Thanks a lot!
--------------------------
e0: 192.168.1.1 e0/0: 192.168.2.1 e0/0: 192.168.3.1
s0: 192.168. s1/0: 192.168.4.2 s1/0: 192.168.5.2
s1/1: 192.168.5.1
e0 e0/0 e0/0
Router A s0 --------------------------
| | |
| | |
| | |
192.168.1.99 192.168.2.99 192.168.3.99
Last Comment
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Dear SAGE:
Thank you so much for your kind tip.
Can you kindly give me a complete command when I use a standard ACL td do (1) and (2) TOO?
Thanks!
Thank you so much for your kind tip.
Can you kindly give me a complete command when I use a standard ACL td do (1) and (2) TOO?
Thanks!
Hi there,
As I mentioned above, you *can't* use a standard ACL to accomplish this, due to the limitations of standard ACLs. Please read through the URLs I posted above for some good documentation.
cheers
As I mentioned above, you *can't* use a standard ACL to accomplish this, due to the limitations of standard ACLs. Please read through the URLs I posted above for some good documentation.
cheers
ASKER
Thanks a lot, SAGE!
duta
duta
Routers
A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.
49K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
ASKER
I noticed that some used ethertnet port IP as the follows:
(config)# int e0,
instead of s1/0 or s1/1 or s0.
What is the difference between using e0 and using s1/1 or s1/0?
I also noticed that someone used the first two lines as the follows:
config)# access-list 10 deny 192.168.1.99 0.0.0.0
(config)# access-list 10 permit any
In other words, they did not apply any ACL to ethernet or serial interface.
Do I still need to apply Acess Control List to interfaces?
Thanks!