Learning by Doing: CISCO Certified Network ... - SCN Research

10. Try the shortcut to the 192.168.3.3 folder from 192.168.1.2. It won’t work.
In fact the computer will appear to freeze and give you an icky message like
this:
11. Try steps 8-10 again but from the 192.168.1.3 workstation. It should work
fine because we only denied the host. Oh fudge! We forgot our pecking order
with ACL’s…they are sequential and we need permits for denies. Let’s go
add that in:
gates(config)#access-list 10 permit ip any
12. Now it should work fine…If you have any problems reboot the computers.
Microsoft is quirky in small networks. I had to do it several times too. What
the heck it may take some time but when you charge $100 an hour…who
cares?
13. Ok…let’s play…let’s verify that we really got our “out” statement correct by
changing it to “in” and see what happens.
gates(config)#int e0/1
gates(config-if)#no ip access-group 10 out
gates(config-if)#ip access-group 10 in
Everything will still work…drat! That is not what we wanted!
14. Let’s finish off this puppy with some show and debug commands.
gates#sh access-lists
Standard IP access list 10
deny 192.168.1.2
permit any
gates#
This will show us, in brief, our standard access list statements. And, to the
big kahuna:
gates#debug ip packet detail
IP packet debugging is on (detailed)
gates#
18:32:05: ICMP type=8, code=0
18:32:05: IP: s=192.168.1.1 (local), d=192.168.1.2 (Ethernet0/0), len 56, sending
345