http://wiki.nesevo.com/index.php?action=history&feed=atom&title=Exercise_Access_Control_List
Exercise Access Control List - Revision history
2026-06-04T06:52:32Z
Revision history for this page on the wiki
MediaWiki 1.35.1
http://wiki.nesevo.com/index.php?title=Exercise_Access_Control_List&diff=467&oldid=prev
Florian at 08:58, 26 August 2008
2008-08-26T08:58:39Z
<p></p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 08:58, 26 August 2008</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l16" >Line 16:</td>
<td colspan="2" class="diff-lineno">Line 16:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/> </div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/> </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>'''Solution:'''</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>'''Solution:'''</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* Each device from the network 192.168.1.0/24 should have access to the two computer in the network 192.168.3.0/24 </div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins class="diffchange diffchange-inline">'''</ins>Each device from the network 192.168.1.0/24 should have access to the two computer in the network 192.168.3.0/24<ins class="diffchange diffchange-inline">''' </ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 permit 192.168.1.0 0.0.0.255</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 permit 192.168.1.0 0.0.0.255</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* Each device from the network 192.168.2.0/24 should have access to every computer in the network 192.168.3.0/24 </div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins class="diffchange diffchange-inline">'''</ins>Each device from the network 192.168.2.0/24 should have access to every computer in the network 192.168.3.0/24 <ins class="diffchange diffchange-inline">'''</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 deny 192.168.2.2</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 deny 192.168.2.2</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 permit 192.168.2.0 0.0.0.255</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 permit 192.168.2.0 0.0.0.255</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* From the network 192.168.5.0/24 have only the device 192.168.5.1/24 access to the two PCs in the network 192.168.3.0/24.</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins class="diffchange diffchange-inline">'''</ins>From the network 192.168.5.0/24 have only the device 192.168.5.1/24 access to the two PCs in the network 192.168.3.0/24.<ins class="diffchange diffchange-inline">'''</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 permit 192.168.5.1</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 permit 192.168.5.1</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 deny 192.168.5.0 0.0.0.255 -> '''By default, when ACL always all IP addresses blocked,'''</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 1 deny 192.168.5.0 0.0.0.255 -> '''By default, when ACL always all IP addresses blocked,'''</div></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l32" >Line 32:</td>
<td colspan="2" class="diff-lineno">Line 32:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Router(config-if)<nowiki>#</nowiki>ip access-group 1 OUT</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Router(config-if)<nowiki>#</nowiki>ip access-group 1 OUT</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* Convert the standard access list in an extended access list.</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins class="diffchange diffchange-inline">'''</ins>Convert the standard access list in an extended access list.<ins class="diffchange diffchange-inline">'''</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 101 permit ip 192.168.1.0 0.0.0.255 0.0.0.0 255.255.255.255</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 101 permit ip 192.168.1.0 0.0.0.255 0.0.0.0 255.255.255.255</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l46" >Line 46:</td>
<td colspan="2" class="diff-lineno">Line 46:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>To no distinction between the protocols to make "'' 'IP'''". IP stands for "any Protocolls"</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>To no distinction between the protocols to make "'' 'IP'''". IP stands for "any Protocolls"</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* Adding the expanded access list so that all the above access rights but access to PC1 generally prohibited. </div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins class="diffchange diffchange-inline">'''</ins>Adding the expanded access list so that all the above access rights but access to PC1 generally prohibited.<ins class="diffchange diffchange-inline">''' </ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 101 deny any hosts 192.168.3.102</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>access-list 101 deny any hosts 192.168.3.102</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br/><br/></div></td></tr>
</table>
Florian
http://wiki.nesevo.com/index.php?title=Exercise_Access_Control_List&diff=466&oldid=prev
Florian: New page: '''Exercise''' <br/><br/> Following network is given <br/><br/> Image:Übungsbeispiel ACL.JPG <br/><br/> * Each device from the network 192.168.1.0/24 should have access to the two com...
2008-08-26T08:56:43Z
<p>New page: '''Exercise''' <br/><br/> Following network is given <br/><br/> <a href="/index.php/File:%C3%9Cbungsbeispiel_ACL.JPG" title="File:Übungsbeispiel ACL.JPG">Image:Übungsbeispiel ACL.JPG</a> <br/><br/> * Each device from the network 192.168.1.0/24 should have access to the two com...</p>
<p><b>New page</b></p><div>'''Exercise'''<br />
<br/><br/><br />
Following network is given<br />
<br/><br/><br />
[[Image:Übungsbeispiel ACL.JPG]]<br />
<br/><br/><br />
* Each device from the network 192.168.1.0/24 should have access to the two computer in the network 192.168.3.0/24<br />
* Each device from the network 192.168.2.0/24 should have access to every computer in the network 192.168.3.0/24 <br />
Jedes Gerät aus dem Netzwerk 192.168.2.0/24 soll auf die beiden Computer in Netzwerk 192.168.3.0/24 zugreifen können except device 192.168.2.2.<br />
* From the network 192.168.5.0/24 have only the device 192.168.5.1/24 access to the two PCs in the network 192.168.3.0/24. <br />
Aus Netzwerk 192.168.5.0/24 soll nur Gerät 192.168.5.1 auf die beiden PCs in Netzwerk 192.168.3.0/24 zugreifen können.<br />
* Convert the standard access list in an extended access list. <br />
* Adding the expanded access list so that all the above access rights but access to PC1 generally prohibited. <br />
<br/><br/><br />
----<br />
<br/><br/> <br />
'''Solution:'''<br />
* Each device from the network 192.168.1.0/24 should have access to the two computer in the network 192.168.3.0/24 <br />
access-list 1 permit 192.168.1.0 0.0.0.255<br />
<br/><br/><br />
* Each device from the network 192.168.2.0/24 should have access to every computer in the network 192.168.3.0/24 <br />
access-list 1 deny 192.168.2.2<br />
access-list 1 permit 192.168.2.0 0.0.0.255<br />
<br/><br/><br />
* From the network 192.168.5.0/24 have only the device 192.168.5.1/24 access to the two PCs in the network 192.168.3.0/24.<br />
access-list 1 permit 192.168.5.1<br />
access-list 1 deny 192.168.5.0 0.0.0.255 -> '''By default, when ACL always all IP addresses blocked,'''<br />
'''about this line is superfluous (default: access-list 1 deny 0.0.0.0 255.255.255.255)'''<br />
<br/><br/><br />
Router(config)<nowiki>#</nowiki>int fa1/0 <br />
<br/><br/><br />
Router(config-if)<nowiki>#</nowiki>ip access-group 1 OUT<br />
<br/><br/><br />
* Convert the standard access list in an extended access list.<br />
access-list 101 permit ip 192.168.1.0 0.0.0.255 0.0.0.0 255.255.255.255<br />
<br/><br/><br />
access-list 101 permit ip host 192.168.5.1 0.0.0.0 255.255.255.255<br />
<br/><br/><br />
access-list 101 deny ip 192.168.5.0 0.0.0.255 0.0.0.0 255.255.255.255<br />
<br/><br/><br />
access-list 101 deny ip host 192.168.2.2 0.0.0.0 255.255.255.255<br />
<br/><br/><br />
access-list 101 permit ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255<br />
<br/><br/><br />
Instead of the syntax ''''0 .0.0.0 255,255,255,255''' "can also be used any<br />
To no distinction between the protocols to make "'' 'IP'''". IP stands for "any Protocolls"<br />
<br/><br/><br />
* Adding the expanded access list so that all the above access rights but access to PC1 generally prohibited. <br />
access-list 101 deny any hosts 192.168.3.102<br />
<br/><br/><br />
access-list 101 permit ip 192.168.1.0 0.0.0.255 any<br />
<br/><br/><br />
access-list 101 permit ip host 192.168.5.1 any<br />
<br/><br/><br />
access-list 101 deny ip 192.168.5.0 0.0.0.255 any<br />
<br/><br/><br />
access-list 101 deny ip host 192.168.2.2 any<br />
<br/><br/><br />
access-list 101 permit ip 192.168.2.2 0.0.0.255 any<br />
<br/><br/><br />
Router(config)<nowiki>#</nowiki> int fa 1/0<br />
<br/><br/><br />
Router(config-if)<nowiki>#</nowiki>ip access-group 101 out</div>
Florian