Trying 172.16.20.254 ... Open
848
Chapter 20
■
Troubleshooting IP, IPv6, and VLANs
Okay, great!
Step 2: Create an ACL on R1 that stops telnetting to the remote host of 172.16.20.254.
Using a named ACL, start with the protocol (IP or IPv6), choose either a standard or extended
list, and then name it. The name is absolutely case sensitive when applying to an interface.
R1(config)#
ip access-list extended Block_Telnet
R1(config-ext-nacl)#
Step 3: Once you have created the named list, add your test parameters.
R1(config-ext-nacl)#
deny tcp host 10.1.1.1 host 172.16.20.254 eq 23
R1(config-ext-nacl)#permit ip any any
Step 4: Verify your access list.
R1(config-ext-nacl)#
Do'stlaringiz bilan baham: