Rabu, 04 Juli 2012

Access Control List (ACL)




EDMONTON

  --- System Configuration Dialog ---
Continue with configuration dialog? [yes/no]: no
Press RETURN to get started!
Router>ena
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname Edmonton
Edmonton(config)#int fa0/0
Edmonton(config-if)#ip add 172.16.10.1 255.255.255.0
Edmonton(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
Edmonton(config-if)#exit
Edmonton(config)#int fa1/0
Edmonton(config-if)#ip add 172.16.20.1 255.255.255.0
Edmonton(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up
Edmonton(config-if)#exit
Edmonton(config)#int se2/0
Edmonton(config-if)#ip add 172.16.30.1 255.255.255.0
Edmonton(config-if)#no shut
%LINK-5-CHANGED: Interface Serial2/0, changed state to down
Edmonton(config-if)#exit
Edmonton(config)#router eigrp 10
Edmonton(config-router)#network 172.16.10.0 0.0.0.255
Edmonton(config-router)#network 172.16.20.0 0.0.0.255
Edmonton(config-router)#network 172.16.30.0 0.0.0.255
Edmonton(config-router)#exit
Edmonton(config)#exit
%SYS-5-CONFIG_I: Configured from console by console
Edmonton#
 RED DEER
         --- System Configuration Dialog ---
Continue with configuration dialog? [yes/no]: no
Press RETURN to get started!
Router>ena
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname Red_Deer
Red_Deer(config)#int fa0/0
Red_Deer(config-if)#ip add 172.16.40.1 255.255.255.0
Red_Deer(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
Red_Deer(config-if)#exit
Red_Deer(config)#int fa1/0
Red_Deer(config-if)#ip add 172.16.50.1 255.255.255.0
Red_Deer(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up
Red_Deer(config-if)#exit
Red_Deer(config)#int se2/0
Red_Deer(config-if)#ip add 172.16.30.2 255.255.255.0
Red_Deer(config-if)#clock rate 64000
Red_Deer(config-if)#no shut
%LINK-5-CHANGED: Interface Serial2/0, changed state to up
Red_Deer(config-if)#exit
Red_Deer(config)#int se3/0
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to up
Red_Deer(config-if)#ip add 172.16.60.1 255.255.255.0
Red_Deer(config-if)#clock rate 64000
Red_Deer(config-if)#no shut
%LINK-5-CHANGED: Interface Serial3/0, changed state to down
Red_Deer(config-if)#exit
Red_Deer(config)#router eigrp 10
Red_Deer(config-router)#network 172.16.40.0 0.0.0.255
Red_Deer(config-router)#network 172.16.50.0 0.0.0.255
Red_Deer(config-router)#network 172.16.30.0 0.0.0.255
Red_Deer(config-router)#
%DUAL-5-NBRCHANGE: IP-EIGRP 10: Neighbor 172.16.30.1 (Serial2/0) is up: new adjacency
Red_Deer(config-router)#network 172.16.60.0 0.0.0.255
Red_Deer(config-router)#exit
Red_Deer(config)#exit
%SYS-5-CONFIG_I: Configured from console by console
Red_Deer#
CALGARY

--- System Configuration Dialog ---
Continue with configuration dialog? [yes/no]: no
Press RETURN to get started!
Router>ena
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname Calgary
Calgary(config)#int fa0/0
Calgary(config-if)#ip add 172.16.70.1 255.255.255.0
Calgary(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
Calgary(config-if)#exit
Calgary(config)#int fa1/0
Calgary(config-if)#ip add 172.16.80.1 255.255.255.0
Calgary(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up
Calgary(config-if)#exit
Calgary(config)#int se2/0
Calgary(config-if)#ip add 172.16.60.2 255.255.255.0
Calgary(config-if)#no shut
%LINK-5-CHANGED: Interface Serial2/0, changed state to up
Calgary(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to up
Calgary(config-if)#exit
Calgary(config)#router eigrp 10
Calgary(config-router)#network 172.16.70.0 0.0.0.255
Calgary(config-router)#network 172.16.80.0 0.0.0.255
Calgary(config-router)#network 172.16.60.0 0.0.0.255
Calgary(config-router)#
%DUAL-5-NBRCHANGE: IP-EIGRP 10: Neighbor 172.16.60.1 (Serial2/0) is up: new adjacency
Calgary(config-router)#exit
Calgary(config)#exit
%SYS-5-CONFIG_I: Configured from console by console
Calgary#
 Setting ACL dengan ketentuan sbb:
1. 10.0 tidak boleh di akses oleh 40.0
Edmonton#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Edmonton(config)#access-list 10 deny 172.16.40.0 0.0.0.255
Edmonton(config)#access-list 10 permit any
Edmonton(config)#int fa0/0
Edmonton(config-if)#ip access-group 10 out
Edmonton(config-if)#end
%SYS-5-CONFIG_I: Configured from console by console
Edmonton#
2. 10.7 tidak boleh di akses oleh 10.5
Red_Deer#ena
Red_Deer#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Red_Deer(config)#access-list 110 deny ip host 172.16.10.5 host 172.16.50.7
Red_Deer(config)#access-list 110 permit ip any any
Red_Deer(config)#int fa1/0
Red_Deer(config-if)#ip access-group 110 out
Red_Deer(config-if)#end
%SYS-5-CONFIG_I: Configured from console by console
Red_Deer#
3. 10.5 boleh mengakses Red Deer meggunakan telnet       
Red_Deer#ena
Red_Deer#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Red_Deer(config)#access-list 20 permit host 172.16.10.5
Red_Deer(config)#line vty 0 4
Red_Deer(config-line)#access-class 20 in
Red_Deer(config-line)#end
Red_Deer#
%SYS-5-CONFIG_I: Configured from console by console

0 komentar:

Posting Komentar

 

Blogger templates

Blogroll

Blogger templates

About