Question: access-list acl-number {permit/deny} protocol source [mask] destination [mask] [eq port number] Example: 1. Deny FTP access on 172.16.3.0 and deny non 172.16.0.0 traffic on 172.16.3.0

access-list acl-number {permit/deny} protocol source [mask] destination [mask] [eq port number]

Example: 1.

Deny FTP access on 172.16.3.0 and deny non 172.16.0.0 traffic on 172.16.3.0

access-list 101 deny tcp 172.16.0.0 0.0.255.255 172.16.3.0 0.0.0.255 eq 20

access-list 101 deny tcp 172.16.0.0 0.0.255.255 172.16.3.0 0.0.0.255 eq 21

access-list 101 permit ip 172.16.0.0 0.0.255.255 172.16.3.0 0.0.0.255

Questions:

1. Deny SSH traffic from 192.168.4.1 to 192.168.1.1 (All other traffic must be permitted)

2. Deny FTP traffic from 192.168.1.1 to 192.168.2.0 (All other traffic must be permitted)

3. Allow SNMP from 192.168.1.1 to 192.168.4.1 and allow HTTP access from 192.168.4.1 to 192.168.1.1. No other traffic should flow between two hosts.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!