Extended ACL

[TranHoangMinhNguyen5339]

I want to allow pc51,52,53 to use all of features(ftp, ssh, telnet, ping, every features). And, I want to deny all of other computers to use any features (except DNS, Ftp, Email, ping ). I am a beginner. I have no idea how to configure it. Thanks!!!

[Seb Rupik]

Hi there,

Try the following:

!
ip access-list standard VTY-IN
  permit <HOST-51-IP>
  permit <HOST-52-IP>
  permit <HOST-53-IP>
!
vty line 0 15
  access-group VTY-IN
!

cheers,

Seb.

[TranHoangMinhNguyen5339]

sorry, but did you see my program. (Host-51-IP) is the ip of the computer 51. is isn't that ?

[Seb Rupik]

Hi there,

You diagram doesn't give any IP information. Substitute <HOST-5x-IP> with the actual IP address of the relevant host.

cheers,

Seb.

[TranHoangMinhNguyen5339]

I cannot type your command. I Use Cisco and can use help me to use extended ACL ? Thank you very much.

[Seb Rupik]

For an ACL used on the VTY lines you do not need an extended ACL.

Can you share the commands that you are typing into the CLI and the output shown?

cheers,

Seb.

[TranHoangMinhNguyen5339]

As a network engineer, do you know what kind of topology is the best for small business and why ? my teacher asked me about this and it really put me on the spot? thank you very much!

[TranHoangMinhNguyen5339]

Sir, now I have a big one. I have a new problem on my post. I also attach my program. Thank you for what you have done to me.

[Seb Rupik]

I'm afraid I do not have Packet Tracer installed so cannot open your file.

If you can tell me the IP address of the three servers, then I can supply you with the correct ACL to configure on the router.

cheers,

Seb.

[TranHoangMinhNguyen5339]

three servers or three pcs. do you have teamview. it would be better to use it.

[Seb Rupik]

Just the IP addresses for PC-51, PC-52, PC-53.

I don't use facebook so please post the details here.

cheers,

Seb.

[TranHoangMinhNguyen5339]

192.168.3.20 pc-51
192.168.3.21 pc-52
192.168.3.22 pc-53

[Seb Rupik]

OK, on router7 run the following commands:

!
ip access-list standard VTY-IN
  permit 192.168.3.20
  permit 192.168.3.21
  permit 192.168.3.22
!
vty line 0 15
  access-group VTY-IN
!

cheers,

Seb.

[TranHoangMinhNguyen5339]

do you use facebook ? I can send you me team view.