Objectives

This challenge involves the configuration of named ACLs. The objectives of this challenge are to:

• Define a named standard ACL.
• Define a named extended ACL.

Example

> en
# config t
(config)# ip access-list ?
  extended    Extended Access List
  log-update  Control access list log updates
  logging     Control access list logging
  standard    Standard Access List
(config)# ip access-list standard 
  <1-99>  Standard IP access-list number
  WORD    Access-list name
(config)# ip access-list standard leeds
(config-std-nacl)# deny ?
  Hostname or A.B.C.D  Address to match
  any                  Any source host
  host                 A single host address
(config-std-nacl)# deny host 193.34.245.4
(config-std-nacl)# permit host 16.21.50.10
(config-std-nacl)# deny 18.223.156.0 0.15.255.255
(config-std-nacl)# permit 139.32.80.0 0.15.255.255
(config-std-nacl)# exit
(config)# int s0
(config-if)# ip access-group 
  <1-199>      IP access list (standard or extended)
  <1300-2699>  IP expanded access list (standard or extended)
  WORD         Access-list name
(config-if)# ip access-group leeds in
(config-if)# exit
(config)# ip access-list extended tennessee
(config-ext-nacl)# deny ?
  <0-255>  An IP protocol number
  ahp      Authentication Header Protocol
  eigrp    Cisco's EIGRP routing protocol
  esp      Encapsulation Security Payload
  gre      Cisco's GRE tunneling
  icmp     Internet Control Message Protocol
  igmp     Internet Gateway Message Protocol
  igrp     Cisco's IGRP routing protocol
  ip       Any Internet Protocol
  ipinip   IP in IP tunneling
  nos      KA9Q NOS compatible IP over IP tunneling
  ospf     OSPF routing protocol
  pcp      Payload Compression Protocol
  pim      Protocol Independent Multicast
  tcp      Transmission Control Protocol
  udp      User Datagram Protocol
(config-ext-nacl)# deny tcp host 198.89.74.1 host 208.177.41.6 eq telnet
(config-ext-nacl)# permit tcp host 205.198.245.6 host 202.226.135.3 eq telnet
(config-ext-nacl)# deny tcp 54.83.187.0 0.255.255.255 101.167.107.0 0.255.255.255 eq telnet
(config-ext-nacl)# permit tcp 56.248.48.0 0.255.255.255 138.236.218.0 0.255.255.255 eq telnet
(config-ext-nacl)# exit
(config)# int s1
(config-if)# ip access-group tennessee in