Access-list revisited quesion?

[Carlton Patterson]

Hello community

I have created a simple access-list to deny traffic from a single host 10.0.0.1 to my pc connected to router r4 with ip address 192.168.1.2. The ip address on the pc is 192.168.1.1

After creating the access list all traffic is unable to access 192.168.1.1 via 192.168.1.2

Can someone please explain why?

Attached is the topology and config

Cheers

[Elton Babcock]

Can you post the ACL?

Remember when you create and access list you have an implicit deny any any at the end even if you didn't add it. This means you also need some sort of permit statement within your ACL to allow the traffic you want.

Also think of how you are applying the ACL to the interface. Whether you apply it inbound or outbound matters how you create your ACL.



Sent from Cisco Technical Support iPhone App

[kcnajaf]

Hi Carlton,

Modify you config as below on R4

access-list 102 remark test from R1

access-list 102 deny ip host 192.168.1.1 host 10.0.0.1

access-list 102 permit ip any any

And apply this to router interface where pc is connected IN bound direction

as below

interface FastEthernet0/1

ip access-group 102 in

Hope this helps.

Regards

Najaf

Please rate when applicable or helpful !!!