02-25-2024 08:23 AM - edited 02-25-2024 08:27 AM
Hi
I need help with my topology, so what I want
Only this network (192.168.30.0/24) is authorized to have access for remote configuration for the switches and not the others.
But I want all networks to be able to "ping" the "internet" router
Currently on cisco packet tracer each pc communicates well with the default gateway, No problem configuring vlans and creating vty lines
I'm "stuck" on how to ensure that an entire network is authorized to take control of the switches and not just an IP address
And the configuration so that all machines can ping the "internet" router
can you tell me what command should I write to do what I want
Thank for you help
Solved! Go to Solution.
02-25-2024 09:33 AM
@liviu.gheorghe
Thank you for you help good job
For my another question i've the solution
On the ROUTER
interface0/0.10
ip nat inside
exit
interface serial2/0
ip nat outside
accest-list 10 permit 192.168.10.0 0.0.0.255
ip nat inside source list 10 interface serial2/0 overlaod
the same for the others network, just change the number of permit list and network
Thank you
02-25-2024 08:38 AM
Hello @kaillros ,
you have to configure an access list and apply it to the virtual terminal lines of each switch:
ip access-list standard ACL_VTY
permit 192.168.30.0 0.0.0.255
line vty 0 4
access-class ACL_VTY in
02-25-2024 09:33 AM
@liviu.gheorghe
Thank you for you help good job
For my another question i've the solution
On the ROUTER
interface0/0.10
ip nat inside
exit
interface serial2/0
ip nat outside
accest-list 10 permit 192.168.10.0 0.0.0.255
ip nat inside source list 10 interface serial2/0 overlaod
the same for the others network, just change the number of permit list and network
Thank you
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide