CCNA-2 Case Study

Have a question or want to start a discussion? Post it! No Registration Necessary.  Now with pictures!

Threaded View
Hello out there,

I have an assignment which involves three routers connected serially and
each with private networks connected to it.

From left to right, the two outer networks requires an ACL command to
restrict access to the other network but to one item which is supposed to be
a server's IP address number located in the centre router's connected
network.

I thought that this would be easy where that all you need is a couple of
lines of code that will permit ip access of the reuired subnet of the outer
networks to only the server and the second line to deny ip access to the
rest.  The codes are as follows:

access-list 101 ip permit [source subnet] [destination IP address] [any]
access-list 101 ip permit 192.168.86.64 0.0.0.31 192.168.86.33 0.0.0.0 any
access-list 101 ip deny 192.168.86.64 0.0.0.31 any any

access-list 101 ip permit 192.168.86.64 0.0.0.31 host 192.168.86.33 any
access-list 101 ip deny 192.168.86.64 0.0.0.31 any any

The problems is that I keep on getting errors that this is bugging me.  What
am I doing wrong?

Can someone help as that this would be appretiated.



Re: CCNA-2 Case Study

Quoted text here. Click to load it

You got too many "any's" in there. You only use any's when you do not
specifiy an address whether it be source or destination
ie
access-list 101 permit ip 192.168.10.0 0.0.0.255 any
access-list 101 permit ip any 192.168.10.0 0.0.0.255
access-list 101 permit ip 192.168.10.0 0.0.0.255 192.168.11.0 0.0.0.255
access-list 101 permit ip any any


Re: CCNA-2 Case Study - Solution
I found the solution.

access-list 101 permit ip 192.168.86.64 0.0.0.31 192.168.86.33 0.0.0.0

The commands were correct (although what I worte here is different).  It was
that the router simmulation software was incorrect.

After several hours in the network lab testing them on three Cisco 2811
routers connected serially, I noticed that the command worked the first time
and now the assignment is documented and finally completed waiting for
correction.

The routing simulation software is called CCNA Network Visualiser Version
5.0.12 with the latest upgrades.  What a great software bug to find out now.

Kindest Regards

Quoted text here. Click to load it



Site Timeline