E-Lab 11.2.1d - Standard ACL
Configure a standard access list for the local router Bucharest.
The access-list will filter traffic from the internal network at 12.0.0.0.
Bucharest wants to prevent all users on the 12.0.0.0/24 network from accessing the external WAN connection to Vilnius, but still allow connections to the 13.0.0.0/24 network.
Step 1
Activate privileged EXEC mode.
Step 2
Enter global configuration mode.
Step 3.1
Create a standard access-list 1 that denies traffic from the local class A network address 12.0.0.0.
Step 3.2
To allow traffic from networks other than 12.0.0.0, add a second line to access list 1 that permits all IP traffic.
Step 4
Now enter interface configuration mode for Serial 0/0 to apply the access-list.
Step 5
Apply access-list 1 to the serial interface such that filtering occurs on outbound traffic.
Step 6
Type end to exit the configuration session.
Step 7
Type show access-lists to view the access-list that was created.
Step 8
View the ip interface information for Serial 0/0 to verify that the list is being applied.