05.01.2013 Views

CCNA Cisco Certified Network Associate Study Guide - FTP Server

CCNA Cisco Certified Network Associate Study Guide - FTP Server

CCNA Cisco Certified Network Associate Study Guide - FTP Server

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Hands-on Labs 463<br />

3. Choose an access list number that will allow you to create an IP standard<br />

access list. This is a number between 1 and 99.<br />

4. Choose to permit host 172.16.30.2:<br />

2501A(config)#access-list 10 permit 172.16.30.2 ?<br />

A.B.C.D Wildcard bits<br />

<br />

To specify only host 172.16.30.2, use the wildcards 0.0.0.0:<br />

RouterA(config)#access-list 10 permit 172.16.30.2<br />

0.0.0.0<br />

5. Now that the access list is created, you must apply it to an interface to<br />

make it work:<br />

2501A(config)#int e0<br />

2501A(config-if)#ip access-group 10 out<br />

6. Verify your access lists with the following commands:<br />

RouterA#sh access-list<br />

Standard IP access list 10<br />

permit 172.16.30.2<br />

RouterA#sh run<br />

-cut-<br />

interface Ethernet0<br />

ip address 172.16.10.1 255.255.255.0<br />

ip access-group 10 out<br />

ipx network 10A<br />

7. Test your access list by pinging from Host B (172.16.30.2) to Host A<br />

(172.16.10.2).<br />

8. Ping from 2501B and 2501C to Host A (172.16.10.2); this should fail<br />

if your access list is correct.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!