Selasa, 03 Juli 2012

ACL

edmonton

 

Router>enable

Router#config t

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#hostname Edmonton

Edmonton(config)#int fa0/0

Edmonton(config-if)#ip add 172.16.10.1 255.255.255.0

Edmonton(config-if)#no sh

Edmonton(config-if)#exit

Edmonton(config)#int fa1/0

Edmonton(config-if)#ip add 172.16.20.1 255.255.255.0

Edmonton(config-if)#no sh

Edmonton(config-if)#exit

Edmonton(config)#int se2/0

Edmonton(config-if)#ip add 172.16.30.1 255.255.255.0

Edmonton(config-if)#no sh

Edmonton(config-if)#exit

Edmonton(config)#router eigrp 10

Edmonton(config-router)#network 172.16.10.0 0.0.0.255

Edmonton(config-router)#network 172.16.20.0 0.0.0.255

Edmonton(config-router)#network 172.16.30.0 0.0.0.255

Edmonton(config-router)#exit

Edmonton(config)#exit

Router>enable

Router#config t

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#hostname Red_Deer

Red_Deer(config)#int fa0/0

Red_Deer(config-if)#ip add 172.16.40.1 255.255.255.0

Red_Deer(config-if)#no sh

Red_Deer(config-if)#exit

Red_Deer(config)#int fa1/0

Red_Deer(config-if)#ip add 172.16.50.1 255.255.255.0

Red_Deer(config-if)#no sh

Red_Deer(config-if)#exit

Red_Deer(config)#int se2/0

Red_Deer(config-if)#ip add 172.16.30.2 255.255.255.0

Red_Deer(config-if)#clock rate 64000

Red_Deer(config-if)#no sh

Red_Deer(config-if)#exit

Red_Deer(config)#int se3/0

Red_Deer(config-if)#ip add 172.16.60.1 255.255.255.0

Red_Deer(config-if)#clock rate 64000

Red_Deer(config-if)#no sh

Red_Deer(config-if)#exit

Red_Deer(config)#router eigrp 10

Red_Deer(config-router)#network 172.16.40.0 0.0.0.255

Red_Deer(config-router)#network 172.16.50.0 0.0.0.255

Red_Deer(config-router)#network 172.16.30.0 0.0.0.255

Red_Deer(config-router)#network 172.16.60.0 0.0.0.255

Red_Deer(config-router)#exit

Red_Deer(config)#exit

 

calgary

 

 

Router>ena

Router#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#hostname Calgary

Calgary(config)#int fa0/0

Calgary(config-if)#ip add 172.16.70.1 255.255.255.0

Calgary(config-if)#no sh

Calgary(config-if)#ex

Calgary(config)#int fa1/0

Calgary(config-if)#ip add 172.16.80.1 255.255.255.0

Calgary(config-if)#no sh

Calgary(config-if)#ex

Calgary(config)#int se2/0

Calgary(config-if)#ip add 172.16.60.2 255.255.255.0

Calgary(config-if)#no sh

Calgary(config-if)#ex

Calgary(config)#router eigrp 10

Calgary(config-router)#network 172.16.70.0 0.0.0.255

Calgary(config-router)#network 172.16.80.0 0.0.0.255

Calgary(config-router)#network 172.16.60.0 0.0.0.255

Calgary(config-router)#ex

Calgary(config)#ex

 

set ACL :

 

1. 10.0 tidak boleh di akses oleh 40.0

 

Edmonton#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

Edmonton(config)#access-list 10 deny 172.16.40.0 0.0.0.255

Edmonton(config)#access-list 10 permit any

Edmonton(config)#int fa0/0

Edmonton(config-if)#ip access-group 10 out

Edmonton(config-if)#end

 

 

2. 10.7 tidak boleh di akses oleh 10.5

 

Red_Deer#ena

Red_Deer#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

Red_Deer(config)#access-list 110 deny ip host 172.16.10.5 host 172.16.50.7

Red_Deer(config)#access-list 110 permit ip any any

Red_Deer(config)#int fa1/0

Red_Deer(config-if)#ip access-group 110 out

Red_Deer(config-if)#end

 

 

3. 10.5 boleh mengakses Red Deer meggunakan telnet     

Red_Deer#ena

Red_Deer#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

Red_Deer(config)#access-list 20 permit host 172.16.10.5

Red_Deer(config)#line vty 0 4

Red_Deer(config-line)#access-class 20 in

Red_Deer(config-line)#end