ccna collaboration 210-065 book

ccna collaboration 210-065 book.(partial output is omitted here) The above output indicates that IPv4 ACL1 is applied on the outbound side of interface G0/0, while ACLo is not applied on the inbound side.(5) Configure the naming standard IPv4ACLThe IPV4ACL1 on router R3 is configured as follows: R3(config)#ip access-list standard ACL1 Define the naming standard IPv4ACL, the name is ACL1, the name is case-sensitive R3(config-std-nacl)# reinark DENY NETWORK 172.16.2.0 FROM R1 R3(config-std-nacl)#deny 172.16.2.0 0.0.0.0.255 R3(config-std-nacl)#permit any R3(config)#interface gigabitEthernetO/O R3(config-if)#ip access-group ACL1 out Apply the naming standard IPv4 ACL9.2.2 Experiment 2: Configuring Extended IPv4 ACLsThis experiment enables you to master: the method of numbered extended IPv4ACL definition and application. The method of defining and applying Named Extended IPv4ACL. 2. Experiment TopologyThe experiment topology is shown in Figure 9.2. First remove the standard IPv4 ACL defined in Experiment 1 and keep the RIPv2 configuration. Use theDeny PC1's network segment from accessing Serverl's Web service. Deny PC2's network segment access to Serverl's FTP service. Deny PC1's segment access to Serverl's DNS service. Deny PC1's segment access to the Telnet service of Router R3. Deny PC2's segment access to the Web service of Router R2. Deny the network segment on which PC1 and PC2 are located to ping Serverl. only allow R3 to source ping R2's interface S0/0/1 with interface S0/0/1 and disallow R2 to source ping R3's interface S0/0/1 with interface S0/0/1, that is, one-way pingoChapter 9 ACL -121.3. experiment steps(1) Configure Router R1 R1 (config)#access-list 110 remark This is an example for IPv4 extended ACL Add a remark to increase readability R1 (config)#access-list 110 deny tcp 172.16.1.0 0.0 .0.255 host 172.16.3.100 eq 80 Deny access to the Web service of Serverl on the network segment where the PCI is located R1(config)#access-list110 denytcp 172.16.2.00.0.0.255host172.16.3,100eq21Rl( config)#access-list110deny tcp 172.16.2.0 0.0.0.255 host 172.16.3.100 eq 20 The above 2 lines of command deny PC2's network segment access to Serverl's FTP service Rl(config)#access-list 110 deny udp 172.16.1.0 0.0.0.255 host 172.16.3.100 eq 53 Deny PCI's network segment access to Serverl's DNS service Rl(config)#access-list 110 deny tcp 172.16.1.0 0.0.0.255 host 172.16. 23.3 eq 23 Rl(config)#access-list 110 deny tcp 172.16.1.0 0.0.0.255 host 172.16.3.3 eq 23 The above two commands deny the PCI segment to access the Telnet service of Router R3