Router Access Control List ( Standard ) using Cisco Packet Tracer
In this video taking, 3 PC connected to switch & switch connected to router & then router again to a Server. Router has Access control List (ACL) on his outbound direction. & deny PC 2 for accessing server.
for more detail:
https://computernetwork-mmc.blogspot....
---- ------------------------------ ----------------------------- --------------------------------
Goto router0 in CLI option:
Router:en
Router#config t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface fastEthernet 0/0
Router(config-if)#ip address 192.168.10.10 255.255.255.0
Router(config-if)#no shutdown
---------------------
Router(config-if)#exit
Router(config)#interface fastEthernet 0/1
Router(config-if)#ip address 10.10.10.10 255.0.0.0
Router(config-if)#no shutdown
------------------------ ----------------------
Router#en
Router#config t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#ip a?
access-list
Router(config)#ip access-list ?
extended Extended Access List
standard Standard Access List
Router(config)#ip access-list standard ?
1-99 Standard IP access-list number
WORD Access-list name
Router(config-std-nacl)#ip access-list standard 11
Router(config-std-nacl)#?
1-2147483647 Sequence Number
default Set a command to its defaults
deny Specify packets to reject
exit Exit from access-list configuration mode
no Negate a command or set its defaults
permit Specify packets to forward
remark Access list entry comment
Router(config-std-nacl)#deny ?
A.B.C.D Address to match
any Any source host
host A single host address
Router(config-std-nacl)#deny host 192.168.10.2
Router(config-std-nacl)#permit ?
A.B.C.D Address to match
any Any source host
host A single host address
Router(config-std-nacl)#permit any
Router(config-std-nacl)#exit
----------------------- ---------------------------------
Router(config)#interface fastEthernet 0/0
Router(config-if)#ip a?
access-group address authentication
Router(config-if)#ip access-group ?
1-199 IP access list (standard or extended)
WORD Access-list name
Router(config-if)#ip access-group 11 ?
in inbound packets
out outbound packets
Router(config-if)#ip access-group 11 in
Router(config-if)#exit
Router(config)#exit
Router#
%SYS-5-CONFIG_I: Configured from console by console
Router#show ac
Standard IP access list 11
10 deny host 192.168.10.2
20 permit any
Router# ctrl+z