CCNA Cisco Certified Network Associate Study Guide - FTP Server

466 Chapter 9 � Managing Traffic with Access Lists
7. It is important to add this line next to create a permit statement.
2501A(config)#access-list 110 permit ip any 0.0.0.0
255.255.255.255
8. You must create a permit statement; if you just add a deny statement,
nothing will be permitted at all. Please see the sections earlier in this
chapter for more detailed information on the permit command.
9. Apply the access list to the Ethernet 0 on 2501A to stop the Telnet
traffic as soon as it hits the first router interface.
RouterB(config)#int e0
RouterB(config-if)#ip access-group 110 in
RouterB(config-if)#^Z
10. Try telnetting from host 172.16.10.2 to Router B using the destination
IP address of 172.16.20.2. The following messages should be generated
on 2501A’s console. However, the ping command should work.
From host 172.16.10.2: >telnet 172.16.20.2
On Router B’s console, this should appear as follows:
Lab 9.3: Standard IPX Access Lists
01:11:48: %SEC-6-IPACCESSLOGP: list 110 denied tcp
172.16.10.2(1030) -> 172.16.20.2(23), 1 packet
01:13:04: %SEC-6-IPACCESSLOGP: list 110 denied tcp
172.16.10.2(1030) -> 172.16.20.2(23), 3 packets
In this lab, you will configure IPX to allow only IPX traffic from IPX Network
30 and not from IPX Network 50.
1. Remove any existing access lists on the 2501A router. Because this is
an IPX standard access list, the filtering can be placed anywhere on the
network since it can filter based on IPX source and destination IP
addresses.
2. Verify that you have the IPX network working as shown in Figure 9.3.
Use the show ipx route command to see all networks on your routers.