Learning by Doing: CISCO Certified Network ... - SCN Research

Now let’s try to “free-hand” some ACL’s
1. Write a standard ACL to permit access from the EGR network (ip numbers
192.168.30.24, 192.168.30.37, 192.168.30.45 and 192.168.30.221) to the
Sales network. Assume these are the IP addresses for supervisors. All other
IP’s from the EGR should be denied access to the Sales network.
2. Write a named ACL to do the same thing.
3. Write an extended ACL to deny FTP access to everyone in the network.
4. Write a named ACL to allow only the EGR network to have www access.
5. Just for giggles lets allow the sales and HR network to have www access but
not have dns access. In this manner they can get to web pages only if they
know the specific dot-decimal address of the web page. Tee-hee, isn’t this a
snort?
6. Write an extended ACL to allow only the HR people with odd numbered ip
addresses to have the ability to use FTP.
So What Have I Learned Here?
In this lab you learned the intricacies of writing standard, extended and named access
control lists. There is not a lot of material written about ACL’s so you just have to come
up with your own ideas, test them, and learn from them…again…learning by doing.
Now that we may have our “theories” down the next few labs will allow us to put ACL’s
to work in our networks.
341