How to configure Extended acl for an ip address
Download as PPTX, PDF0 likes377 views
This document describes configuring an extended inbound access control list (ACL) on a Cisco 2611 router to deny FTP access from any computer to a device with an IP address of 192.168.2.2. It shows entering configuration mode on the router, adding an access list entry to deny TCP traffic on port 21 to that IP, permitting all other IP traffic, and applying the ACL to incoming traffic on an interface. The access list is then displayed to show the deny and permit entries.
1 of 4
Downloaded 15 times
More Related Content
What's hot (20)
Ad
Viewers also liked (11)
Ad
More from tcpipguru (19)
Recently uploaded (20)
How to configure Extended acl for an ip address
- 1. Extended ACL Configuration on Cisco 2611 XM WWW.TCPIPGURU.COM
- 3. Description Extended Inbound ACL for Router 1 to deny FTP access from any pc to 192.168.2.2 ip address.
- 4. R1#config t Enter configuration commands, one per line. End with CNTL/Z. R1(config)#access-list 100 deny tcp any host 192.168.2.2 eq 21 R1(config)#access-list 100 permit ip any any R1(config-if)#ip access-group 100 in R1#show ip access-lists Extended IP access list 100 10 deny tcp any host 192.168.2.2 eq telnet 20 deny tcp any host 192.168.2.2 eq ftp 30 permit ip any any