Question: access-list acl-number {permit/deny} protocol source [mask] destination [mask] [eq port number] Example: 1. Deny FTP access on 172.16.3.0 and deny non 172.16.0.0 traffic on 172.16.3.0
access-list acl-number {permit/deny} protocol source [mask] destination [mask] [eq port number]
Example: 1.
Deny FTP access on 172.16.3.0 and deny non 172.16.0.0 traffic on 172.16.3.0
access-list 101 deny tcp 172.16.0.0 0.0.255.255 172.16.3.0 0.0.0.255 eq 20
access-list 101 deny tcp 172.16.0.0 0.0.255.255 172.16.3.0 0.0.0.255 eq 21
access-list 101 permit ip 172.16.0.0 0.0.255.255 172.16.3.0 0.0.0.255
Questions:
1. Deny SSH traffic from 192.168.4.1 to 192.168.1.1 (All other traffic must be permitted)
2. Deny FTP traffic from 192.168.1.1 to 192.168.2.0 (All other traffic must be permitted)
3. Allow SNMP from 192.168.1.1 to 192.168.4.1 and allow HTTP access from 192.168.4.1 to 192.168.1.1. No other traffic should flow between two hosts.
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
