Re: Extended IP access list

Dear All
pls tell me when i will use deny ip host x.x.x.x host x.x.x.x
what are the applications

On Tue, Jul 12, 2011 at 6:27 AM, Roy Khan <roykhan123_at_hotmail.com> wrote:

> Dear
>
> the distribution list is use to filter the routing update in this case
> apply your access list the interface not to the routing process.
>
> int s1/0
> access-group XX in
>
> aslo it not correct 10 deny ip host 2.2.2.2 host 3.3.3.0
> correct one is 10 deny ip host 2.2.2.2 host 3.3.3.3
>
>
> > Date: Mon, 11 Jul 2011 22:55:58 -0400
> > To: ccielab_at_groupstudy.com
> > From: jhnrose401_at_gmail.com
> > Subject: Extended IP access list
> >
> > Dear
> >
> > I am working on the extended access list
> >
> > TASK when R1 try to ping the 3.3.3.3 using source 2.2.2.2 ping the
> 3.3.3.3 it
> > will not reachable. i am not able to do this pls help
> >
> > when i will use host key word i want to do this is using host key word
> >
> > R1 :
> > sh run | sec router
> > router rip
> > version 2
> > network 0.0.0.0
> > no auto-summary
> > Serial1/0 10.1.1.1 YES manual up up
> >
> > Loopback1 2.2.2.2 YES manual up up
> >
> >
> > R2
> >
> > Serial1/0 10.1.1.2 YES SLARP up up
> >
> > Loopback2 3.3.3.3 YES manual up up
> >
> > Loopback3 4.4.4.4 YES manual up up
> >
> >
> > router rip
> > version 2
> > network 0.0.0.0
> > distribute-list 101 in
> > no auto-summary
> >
> > Router#sh access-lists
> > Extended IP access list 101
> > 10 deny ip host 2.2.2.2 host 3.3.3.0
> > 20 permit ip any any (1 match)
> > Router#ping 3.3.3.3 source 2.2.2.2
> >
> > Type escape sequence to abort.
> > Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
> > Packet sent with a source address of 2.2.2.2
> > !!!!!
> > Success rate is 100 percent (5/5), round-trip min/avg/max = 60/83/136 ms
> >
> >
> > the
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Jul 12 2011 - 06:28:09 ART