Step 1: Basic Configuration
==========================
Router1
--------
Router>enable
Router#conf terminal
Router(config)#interface gigabitEthernet 0/0
Router(config-if)#ip address 192.168.1.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#interface ser
Router(config)#interface serial 0/3/0
Router(config-if)#ip address 192.168.3.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#exit
Router2
--------
Router>enable
Router#configure terminal
Router(config)#interface gigabitEthernet 0/0
Router(config-if)#ip address 192.168.2.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#interface serial 0/1/0
Router(config-if)#ip address 192.168.3.2 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#exit
Step 2: Configure static Route
==============================
Router1
Router(config)#ip route 0.0.0.0 0.0.0.0 192.168.3.2
Router2
Router(config)#ip route 0.0.0.0 0.0.0.0 192.168.3.1
Now browse 192.168.2.4 from pc 0
Step 4: Configure ACL
======================
a. Standard ACL
Only PC1 is allowed to ping with Router2
Router1
Router(config)#access-list 1 permit 192.168.1.3 0.0.0.0 or
Router(config)#access-list 1 permit host 192.168.1.3
Router(config)#exit
Router#show access-lists
Router(config)#interface serial 0/3/0
Router(config-if)#ip access-group 1 out
Router(config-if)#exit
Reset the above ACL configuration
Router(config)#no access-list 1
Router(config)#exit
Router#configure terminal
Router(config)#interface serial 0/3/0
Router(config-if)#no ip access-group 1 out
Router(config-if)#exit
b. Extended ACL
Pc0 = ping + web, pc1 = ping + web +telnet, pc2= ping + web
Router1
Router(config)#access-list ?
<1-99> IP standard access list
<100-199> IP extended access list
Router(config)#access-list 100 permit tcp host 192.168.1.3 host 192.168.3.2 eq
telnet
Router(config)#access-list 100 deny tcp any any eq telnet
Router(config)#access-list 100 permit ip any any
Router(config)#exit
Router#configure terminal
Router(config)#interface serial 0/3/0
Router(config-if)#ip access-group 100 out
Router(config-if)#exit