CCNA Cisco Certified Network Associate Study Guide - FTP Server

Hands-on Labs 467
3. Configure an access list on 2501A to allow only IPX traffic from Network
30 and to deny IPX Network 50. IPX standard lists use the
access list numbers 800–899.
2501A#config t
RouterC(config)#access-list 810 ?
deny Specify packets to reject
permit Specify packets to permit
4. First, deny IPX Network 50, then permit everything else. The –1 is a
wildcard in IPX.
2501A(config)#access-list 810 deny ?
-1 Any IPX net
Source net
N.H.H.H Source net.host address
5. Choose Network 30 as a source address:
2501A(config)#access-list 810 deny 50
-1 Any IPX net
Destination net
N.H.H.H Destination net.host address
6. Choose Network 10 as the destination network:
2501A(config)#access-list 810 permit 50 10
7. Permit everything else with an IPX wildcard:
2501A(config)#access-list 810 permit –1 -1
8. Apply the list to the serial interface of 2501A to stop the packets as
they reach the router:
2501A(config)#int s0
2501A(config-if)#ipx access-group 810 in
2501A(config-if)#^Z
9. Verify the list by looking at the IPX routing table. Network 50 should
not be in the 2501A IPX routing table. Also, use the show accesslist
and show ipx access-list commands to vary the list.