ACL Help please

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

You can ad more lines in either extended or standard ACLs mate.
Depending where you must place the ACL you may have to create two separate ACLs one for IN (inbound) other for OUT (outbound).
You can have an extended ACL for the inbound traffic and a standard ACL for the outbound traffic.

Hope it answers your question mate.

Best of luck.

Albert, C

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Two: one in, one out.

 

Given these requirements:
1 - Students can reach PC2 and PC3 in Admin network
2 - Students should not be able to reach any other hosts in Admin network
3 - Any Admin host should be able to reach any Student host

Strictly speaking, none of the access-lists shown will work properly. You will need to use the "established" keyword, or a reflexive access-list. Requirement 2, above, will prevent any Admin host from establishing a connection to a Student host because it will prevent any traffic from Student to Admin networks. Admin hosts (except PC2 and PC3) will be unable to get a response to ping or establish a tcp connection to any Student host (although Admin hosts could spam icmp and udp, assuming they don't mind not getting a response back).

Established or reflexive access-lists might be a bit more advanced topic than the intention of the design exercise, in which case ignore it, but it is good to know that tcp will not work, assuming I have the requirements correct!

Spice_Weasel

 

You are right kevicho but I was told at college to place it manually just to be on the safe side so force of habit I'd say.

spice-wisel got to read about those reflexive access-list, thanks for spreading the sead in my mind lol