E-Lab 11.2.2b - Extended ACL
Configure an extended access-control list for the local router Mexico_City.
A network administrator wants to block access from host 198.77.116.7 to host 12.0.0.3.
She decides to place the access list inbound on the Fast Ethernet port of the Mexico_City router, to place the extended access list as close to the source as possible.
Step 1
Activate privileged EXEC mode.
Step 2
Enter global configuration mode.
Step 3.1
Create an extended access-list 101 that denies ip traffic to the host at address 12.0.0.3 from the host at 198.77.116.7.
Use the host keyword to specify end systems.
Step 3.2
Add a line to the access-list so that any other traffic can pass through the interface.
Step 4
Now enter interface configuration mode for fastethernet 0/0 to apply the access-list.
Step 5
Apply access-list 101 to the fastethernet interface such that filtering occurs on inbound traffic.
Step 6
Type end to exit the configuration session.
Step 7
Type show access-lists to view the access-list that was created.
Step 8
View the ip interface information for fastethernet 0/0 to verify that the list is being applied.