| CCNA Lab Console: | Extended ACL Lab |
|
Celt Records is a major distributor of 80's rock in Southern Ireland. Each store consists of one LAN and all routers are completely configured and in full working order. However, the Network Manager has asked you to create an extended IP access-list (101) that will deny FTP packets from host 192.5.5.2 to any host on network 210.93.105.0 and permit traffic from all other networks. The routers have been configured with the following specifications:
The routers are named CeltA, CeltB, CeltC, CeltD and CeltE. |
|
|
Inside Tips: Use the management host connected to the CeltA router.
Before you attempt this lab -- figure out the commands to complete the task and then input them. Remember that an extended ACL is placed close to the source and that a deny statement must be followed by a permit statement. Also, is the permit statement in or out? How about applying an ACL to an interface? As always, "show running-config" - "show access-list #" - "copy running-config startup-config" are your friends.
Oh, by the way - one other thing - if you do not have the Desktop's 10-Key down -- then you will be in a world of hurt when it comes to this Lab. Practice for a few minutes each day. Fire up "Notepad" within your Windows accessories and set focus to the application. Then put your middle (longest) finger on the 10-Key numeral "5". Close your eyes. (Can you feel the embossed underline on the "5"?)
First finger - hit 7 4 1 0 Start keying in the numbers. Steal a glimpse of "Notepad" from time to time to check what you think you are entering is in fact the case. If not - find the "underscore" character again and start over. Give it a few days and you will be a whiz! |