0% found this document useful (0 votes)
11 views2 pages

On Router 1

The document outlines access control lists (ACLs) configured on three routers, specifying permitted and denied traffic for various protocols and hosts. Router 1 has multiple ACLs for UDP, TCP, and ICMP traffic, while Routers 2 and 3 have simpler configurations focusing on host access. Each router implements access-class restrictions for virtual terminal lines and applies specific ACLs to their interfaces.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
11 views2 pages

On Router 1

The document outlines access control lists (ACLs) configured on three routers, specifying permitted and denied traffic for various protocols and hosts. Router 1 has multiple ACLs for UDP, TCP, and ICMP traffic, while Routers 2 and 3 have simpler configurations focusing on host access. Each router implements access-class restrictions for virtual terminal lines and applies specific ACLs to their interfaces.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 2

On Router 1

access-list 10 permit host 192.168.3.3

line vty 0 4

access-class 10 in

access-list 120 permit udp any host 192.168.1.3 eq domain

access-list 120 permit tcp any host 192.168.1.3 eq smtp

access-list 120 permit tcp any host 192.168.1.3 eq ftp

access-list 120 deny tcp any host 192.168.1.3 eq 443

access-list 120 permit tcp host 192.168.3.3 host 10.1.1.1 eq 22

interface s0/0/0

ip access-group 120 in

access-list 120 permit icmp any any echo-reply

access-list 120 permit icmp any any unreachable

access-list 120 deny icmp any any

access-list 120 permit ip any any

On Router 2
access-list 10 permit host 192.168.3.3

line vty 0 4

access-class 10 in

On Router 3
access-list 10 permit host 192.168.3.3

line vty 0 4

access-class 10 in

access-list 100 permit tcp 10.0.0.0 0.255.255.255 eq 22 host 192.168.3.3

access-list 100 deny ip 10.0.0.0 0.255.255.255 any

access-list 100 deny ip 172.16.0.0 0.15.255.255 any


access-list 100 deny ip 192.168.0.0 0.0.255.255 any

access-list 100 deny ip 127.0.0.0 0.255.255.255 any

access-list 100 deny ip 224.0.0.0 15.255.255.255 any

access-list 100 permit ip any any

interface s0/0/1

ip access-group 100 in

access-list 110 permit ip 192.168.3.0 0.0.0.255 any

interface g0/1

ip access-group 110 in

You might also like