Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

Hello, I am trying to configure an access list to a router that connects to the

ID: 3622791 • Letter: H

Question

Hello, I am trying to configure an access list to a router that connects to the internet,
I have 4 offices in my network and I want one office to be blocked from accessing the router which connects to the web but allow all other offices.

I configured one but for some reason it blocked my whole network and I cant figure out why, to get a better understand you can take a look at my network (im using packet tracer)

http://img402.imageshack.us/img402/1017/nse.jpg

Any help on what I can do to achieve my goal would be awesome

Thank you very much

Explanation / Answer

I have

R1(config)#access-list 102 deny ip host 192.168.40.1 192.168.40.0.255.255.255
R1(config)#access-list 102 permit ip any any
R1(config)#interface fastEthernet 0/0
R1(config-if)#ip access-group 102 in
R1(config-if)#exit
R1(config)#

R2>enable
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#access-list 2 deny 192.168.40.1 0.255.255.255
R2(config)#access-list 2 permit any
R2(config)#interface fastethernet 0/1
R2(config-if)#ip access-group 2 out
R2(config-if)#

If that doesn't help - you should just deny access to the router from the computer you don't want connecting, and allow access for the rest. You might have to manually configure each computer.