cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
363
Views
0
Helpful
3
Replies

Access Lists

js358
Level 1
Level 1

Hello All:

I really am not that good at access and need to restrict all traffic to 10.0.5.x network with the exception of 5 pc's who need full access.

I know you create access-list whatever but I get a little confused about in out etc.

Can anyone provide me with a direction on this or a resource to use. Thanks in advance

1 Accepted Solution

Accepted Solutions

Jon Marshall
Hall of Fame
Hall of Fame

Hi

Just in case it is still not clear.

Assuming 5 pc's are 192.168.5.1 -> 192.168.5.5

access-list 101 permit ip host 192.168.5.1 10.0.5.0 0.0.0.255

access-list 101 permit ip host 192.168.5.2 10.0.5.0 0.0.0.255

access-list 101 permit ip host 192.168.5.3 10.0.5.0 0.0.0.255

access-list 101 permit ip host 192.168.5.4 10.0.5.0 0.0.0.255

access-list 101 permit ip host 192.168.5.5 10.0.5.0 0.0.0.255

access-list 101 deny ip any 10.0.5.0 0.0.0.255

Then on the interface that connects to the 10.0.5.x network

int fa0/0

ip access-group 101 out

The above config will stop all traffic going onto the 10.0.5.x network from any other subnets with the exception of the 5 pc's.

HTH

Jon

View solution in original post

3 Replies 3

Jon Marshall
Hall of Fame
Hall of Fame

Hi

Just in case it is still not clear.

Assuming 5 pc's are 192.168.5.1 -> 192.168.5.5

access-list 101 permit ip host 192.168.5.1 10.0.5.0 0.0.0.255

access-list 101 permit ip host 192.168.5.2 10.0.5.0 0.0.0.255

access-list 101 permit ip host 192.168.5.3 10.0.5.0 0.0.0.255

access-list 101 permit ip host 192.168.5.4 10.0.5.0 0.0.0.255

access-list 101 permit ip host 192.168.5.5 10.0.5.0 0.0.0.255

access-list 101 deny ip any 10.0.5.0 0.0.0.255

Then on the interface that connects to the 10.0.5.x network

int fa0/0

ip access-group 101 out

The above config will stop all traffic going onto the 10.0.5.x network from any other subnets with the exception of the 5 pc's.

HTH

Jon

Thank you Jon - this was a big help

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: