Configuring Extended ACLs - Scenario 1
line vty 0 4
password vtypa55
login
enable secret ciscoenpa55
Configure, Apply and Verify an Extended Numbered ACL
access-list 100 permit tcp 172.22.34.64 0.0.0.31 host 172.22.34.62 eq ftp
access-list 100 permit icmp 172.22.34.64 0.0.0.31 host 172.22.34.62
int gig0/0
ip access-group 100 in
Verify the ACL implementation
PC1> ping 172.22.34.62
PC1> ftp 172.22.34.62
ftp> quit
PC1> ping 172.22.34.98
Configure, Apply and Verify an Extended Named ACL
ip access-list extended HTTP_ONLY
permit tcp 172.22.34.96 0.0.0.15 host 172.22.34.62 eq www
permit icmp 172.22.34.96 0.0.0.15 host 172.22.34.62
int gig0/1
ip access-group HTTP_ONLY in
Verify the ACL implementation
PC2> ping 172.22.34.62
PC2> ftp 172.22.34.62
URL-> http://172.22.34.62
PC2> ping 172.22.34.66

Comments
Post a Comment