Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Extended access list question

  • 26-01-2007 6:20pm
    #1
    Registered Users, Registered Users 2 Posts: 319 ✭✭


    Hi,

    Doing my CCNA, and got an exercise here that's wreckin my head. Not looking for someone else to do it for me and give me the answer, but for someone in the know to point out if what I've finished up with will work or not.

    Plan:

    Have a LAN network address of 192.168.50.0, subnetting, and using the 5th subnet. Ethernet interface on the router is taking the last address in the subnet.

    Net: 192.168.50.80
    Broadcast: 192.168.50.95
    Hosts: 192.168.50.81 - 192.168.50.94

    Lower half: 192.168.50.81 - 192.168.50.87
    Upper half: 192.168.50.88 - 192.168.50.93
    Router: 192.168.50.94

    Servers located from 209.0.0.1 - 209.0.0.254

    Trying to:

    Allow top half of subnet access to all servers using all IP protocols
    Allow bottom half of subnet access to bottom half of servers using all IP protocols.
    Servers can't be accessible by any other hosts (all the other subnets)


    permit ip 192.168.50.88 0.0.0.7 209.0.0.0 0.0.0.0
    permit ip 192.168.50.80 0.0.0.7 209.0.0.0 0.0.0.127


Comments

  • Registered Users, Registered Users 2 Posts: 5,335 ✭✭✭Cake Fiend


    Looks OK to me (with access-list xxx in front of course)


  • Registered Users, Registered Users 2 Posts: 5,335 ✭✭✭Cake Fiend


    Looks OK to me (with access-list xxx in front of course, and access-group applied on one of the interfaces)


  • Registered Users, Registered Users 2 Posts: 141 ✭✭noclee


    Would it not be if I'm reading your reqirumnents right
    permit ip 192.168.50.88 0.0.0.7 209.0.0.0 0.0.0.255
    hosts .88-94 -> Servers .1-254

    permit ip 192.168.50.80 0.0.0.7 209.0.0.128 0.0.0.127
    hosts .81-87 -> Servers .128-254

    Thanks,
    Noclee.


Advertisement