You are on page 1of 2

ACL STANDARD

R1
Router(config)#interface f0/0
Router(config-if)#ip address 50.0.0.1 255.255.255.0
Router(config-if)#no shutdown

Router(config)#interface FastEthernet2/0
Router(config-if)#ip address 20.0.0.254 255.255.255.0
Router(config-if)#no shutdown

Router(config)#interface FastEthernet1/0
Router(config-if)#ip address 10.0.0.254 255.255.255.0
Router(config-if)#no shutdown
Router(config)#ip route 30.0.0.0 255.255.255.0 50.0.0.2
Router(config)#ip route 40.0.0.0 255.255.255.0 50.0.0.2

Router(config)#access-list 3 deny 10.0.0.0 0.0.0.255


Router(config)#access-list 3 permit any
Router(config)#interface f2/0
Router(config-if)#ip access-group 3 out
Router(config-if)#exit
Router(config)#access-list 5 deny 20.0.0.0 0.0.0.255
Router(config)#access-list 5 permit any
Router(config)#interface f1/0
Router(config-if)#ip access-group 5 out

R2
Router(config)#interface f0/0
Router(config-if)#ip address 50.0.0.2 255.255.255.0
Router(config-if)#no shutdown

Router(config)#interface FastEthernet2/0
Router(config-if)#ip address 30.0.0.254 255.255.255.0
Router(config-if)#no shutdown

Router(config)#interface FastEthernet1/0
Router(config-if)#ip address 40.0.0.254 255.255.255.0
Router(config-if)#no shutdown
Router(config)#ip route 10.0.0.0 255.255.255.0 50.0.0.1
Router(config)#ip route 20.0.0.0 255.255.255.0 50.0.0.1

Router(config)#access-list 2 deny 10.0.0.0 0.0.0.255


Router(config)#access-list 2 permit any
Router(config)#interface f1/0
Router(config-if)#ip access-group 2 out
Router(config-if)#exit
Router(config)#access-list 4 deny 20.0.0.0 0.0.0.255
Router(config)#access-list 4 permit any
Router(config)#interface f2/0
Router(config-if)#ip access-group 4 out

ACL EXTENDED

R1
Router(config)#interface s5/0
Router(config-if)#ip address 50.0.0.1 255.255.255.0
Router(config-if)#no shutdown
Router(config)#interface FastEthernet2/0
Router(config-if)#ip address 20.0.0.254 255.255.255.0
Router(config-if)#no shutdown

Router(config)#interface FastEthernet1/0
Router(config-if)#ip address 10.0.0.254 255.255.255.0
Router(config-if)#no shutdown
Router(config)#ip route 30.0.0.0 255.255.255.0 50.0.0.2
Router(config)#ip route 40.0.0.0 255.255.255.0 50.0.0.2

Router(config)#access-list 100 permit ip 10.0.0.0 0.0.0.255 30.0.0.0 0.0.0.255


Router(config)#access-list 100 deny ip any any
Router(config)#interface f1/0
Router(config-if)#ip access-group 100 in
Router(config-if)#exit
Router(config)#access-list 101 permit ip 20.0.0.0 0.0.0.255 40.0.0.0 0.0.0.255
Router(config)#access-list 101 deny ip any any
Router(config)#interface f2/0
Router(config-if)#ip access-group 101 in

R2
Router(config)#interface s5/0
Router(config-if)#ip address 50.0.0.2 255.255.255.0
Router(config-if)#no shutdown

Router(config)#interface FastEthernet2/0
Router(config-if)#ip address 30.0.0.254 255.255.255.0
Router(config-if)#no shutdown

Router(config)#interface FastEthernet1/0
Router(config-if)#ip address 40.0.0.254 255.255.255.0
Router(config-if)#no shutdown
Router(config)#ip route 10.0.0.0 255.255.255.0 50.0.0.1
Router(config)#ip route 20.0.0.0 255.255.255.0 50.0.0.1

You might also like