Comments on: [CCNA] Desafio 2 da Semana 3 - Janeiro de 2010

By: voitexem

voitexem — Thu, 20 May 2010 00:10:55 +0000

access-list 10 permit 10.1.1.0 0.255.255.255
line vty 0 4
access-class 10 in

access-list 110 deny ip host 10.1.2.3 host 192.168.1.1
access-list 110 deny ip 10.1.2.0 0.255.255.255 10.1.1.0 0.255.255.255
access-list 110 permit ip any any

Fa0/1=ip access-group 110 in

By: Suzi

Suzi — Mon, 01 Feb 2010 17:09:11 +0000

a) access-list 50 permit 10.1.1.0 0.0.0.3

applicada = line vty 0 4
access-class 50 in

b) access-list 10 deny host 10.1.2.3
access-list 10 permit any

aplicada
int s0/1 = ip access-group 10 out

c) access-list 11 deny 10.1.2.0 0.0.0.3
access-list 11 permit any

aplicada
int f1/1 = ip access-group out

By: willian_mattos

willian_mattos — Mon, 25 Jan 2010 20:10:44 +0000

access-list 10 permit 10.1.1.0 0.255.255.255
line vty 0 4
access-class 10 in

access-list 110 deny ip host 10.1.2.3 host 192.168.1.1
access-list 110 deny ip 10.1.2.0 0.255.255.255 10.1.1.0 0.255.255.255
access-list 110 permit ip any any

Fa0/1=ip access-group 110 in

By: Bruno Freixo

Bruno Freixo — Mon, 25 Jan 2010 11:59:07 +0000

Ola,

A condição C foi a mais complicada, pois todas as formas que eu fiz bloqueou o trafego nos dois sentidos. Nao sei o que tipo de acesso deve ser liberado da Rede Admin para rede Student, entao liberao apenas ICMP.

Condição A:
access-list 10 permit 10.1.1.0 0.0.0.3
RA(config)# line vty 0 4
RA(config-line)# access-class 10 in

Condição B:
access-list 100 deny tcp host 10.1.2.3 host 192.168.1.2 eq www
access-list 100 permit ip any any
RA(config)# interface Fa0/1
RA(config-if)# ip access-group 100 in

Condição C:
access-list 101 permit icmp 10.1.2.0 0.0.0.3 10.1.1.0 0.0.0.3 echo-reply
RA(config)# interface Fa1/1
RA(config-if)# ip access-group 100 in