Hello, I am trying to configure an access list to a router that connects to the
ID: 3622791 • Letter: H
Question
Hello, I am trying to configure an access list to a router that connects to the internet,I have 4 offices in my network and I want one office to be blocked from accessing the router which connects to the web but allow all other offices.
I configured one but for some reason it blocked my whole network and I cant figure out why, to get a better understand you can take a look at my network (im using packet tracer)
http://img402.imageshack.us/img402/1017/nse.jpg
Any help on what I can do to achieve my goal would be awesome
Thank you very much
Explanation / Answer
I have
R1(config)#access-list 102 deny ip host 192.168.40.1 192.168.40.0.255.255.255
R1(config)#access-list 102 permit ip any any
R1(config)#interface fastEthernet 0/0
R1(config-if)#ip access-group 102 in
R1(config-if)#exit
R1(config)#
R2>enable
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#access-list 2 deny 192.168.40.1 0.255.255.255
R2(config)#access-list 2 permit any
R2(config)#interface fastethernet 0/1
R2(config-if)#ip access-group 2 out
R2(config-if)#
If that doesn't help - you should just deny access to the router from the computer you don't want connecting, and allow access for the rest. You might have to manually configure each computer.