Configuration of ACL

[sameerulhaq000]

I want to block all servers from Lahore Router 3 network so that only Lahore Router 3 Pcs and Laptops not able to access all these servers. Please help!

[Georg Pauwen]

Hello,

provide the relevant IP addresses, e.g.:

Source 1.1.1.1 Destination 2.2.2.2 --> Allow

Source 1.1.1.1 Destination 3.3.3.3 --> Deny

etc.

[paul driver · Accepted solution]

Hello
On the router Lahore-Router3 apply the an extended ACL inbound on the physical interface connection to Lahore-Switch3 denying connection to those ftp/email/dns/web servers

example- Lahore-Router3:

ip access-list extended SRV-ACCESS

remark "deny access to servers"
deny ip 10.55.75.16 0.0.0.7 host 10.55.75.20 
deny ip 10.55.75.16 0.0.0.7 host 10.55.75.25
deny ip 10.55.75.16 0.0.0.7 host 10.55.75.53
deny ip 10.55.75.16 0.0.0.7 host 10.55.75.80
permit ip any any

int x/x
description link to Lahore-Switch3
ip access-group SRV-ACCESS in