Learning by Doing: CISCO Certified Network ... - SCN Research

gates(config)#access-list extended no_ping
gates(config-ext-nac;)#deny icmp host 192.168.1.2 192.168.3.0 0.0.0.255
gates(config-ext-nacl)#permit icmp any any
gates(config-ext-nacl)#exit
gates(config)#ip access-list extended no_telnet
gates(config-ext-nacl)#deny tcp host 192.168.3.2 any eq 23
gates(config-ext-nacl)#permit tcp any any
4. Step 2: apply the ACL to an interface. Since this is an extended ACL it should be
placed nearest the source as possible using “in.”
gates(config)#int e0/0
gates(config-if)#ip access-group no_ping in
gates(config)#int e0/1
gates(config-if)#ip access-group no_telnet in
5. From 192.168.1.2 try to ping 192.168.3.3. It should not work and be unreachable:
C:\WINDOWS\Desktop>ping 192.168.3.3
Pinging 192.168.3.3 with 32 bytes of data:
Reply from 192.168.1.1: Destination net unreachable.
Reply from 192.168.1.1: Destination net unreachable.
Reply from 192.168.1.1: Destination net unreachable.
Reply from 192.168.1.1: Destination net unreachable.
Ping statistics for 192.168.3.3:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
C:\WINDOWS\Desktop>
6. Try to ping from 192.168.1.2 to 192.168.3.2 and 172.16.1.1…both will not work.
Telnet to 172.16.1.1 should work on 192.168.3.3 but not on 192.168.3.2. You will
see this type of message if telnet is not working:
352