CCNA-2 Case Study

Hello out there,

I have an assignment which involves three routers connected serially and each with private networks connected to it.

From left to right, the two outer networks requires an ACL command to restrict access to the other network but to one item which is supposed to be a server's IP address number located in the centre router's connected network.

I thought that this would be easy where that all you need is a couple of lines of code that will permit ip access of the reuired subnet of the outer networks to only the server and the second line to deny ip access to the rest. The codes are as follows:

access-list 101 ip permit [source subnet] [destination IP address] [any] access-list 101 ip permit 192.168.86.64 0.0.0.31 192.168.86.33 0.0.0.0 any access-list 101 ip deny 192.168.86.64 0.0.0.31 any any

access-list 101 ip permit 192.168.86.64 0.0.0.31 host 192.168.86.33 any access-list 101 ip deny 192.168.86.64 0.0.0.31 any any

The problems is that I keep on getting errors that this is bugging me. What am I doing wrong?

Can someone help as that this would be appretiated.

Reply to
Captain Apollo
Loading thread data ...

You got too many "any's" in there. You only use any's when you do not specifiy an address whether it be source or destination ie access-list 101 permit ip 192.168.10.0 0.0.0.255 any access-list 101 permit ip any 192.168.10.0 0.0.0.255 access-list 101 permit ip 192.168.10.0 0.0.0.255 192.168.11.0 0.0.0.255 access-list 101 permit ip any any

Reply to
Brian V

I found the solution.

access-list 101 permit ip 192.168.86.64 0.0.0.31 192.168.86.33 0.0.0.0

The commands were correct (although what I worte here is different). It was that the router simmulation software was incorrect.

After several hours in the network lab testing them on three Cisco 2811 routers connected serially, I noticed that the command worked the first time and now the assignment is documented and finally completed waiting for correction.

The routing simulation software is called CCNA Network Visualiser Version

5.0.12 with the latest upgrades. What a great software bug to find out now.

Kindest Regards

Reply to
Captain Apollo

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.