Ccna routing and Switching Complete Study Guide

ip access-group Block_Telnet in

Step 6: Test your access list.

R1#

telnet 172.16.20.254

Trying 172.16.20.254 ... Open

Server1>

Hmm…okay, that didn’t work because I’m still able to telnet to the remote host. Let’s 

take a look at our list, verify our interface, and then fix the problem.

R1#

sh access-list

Extended IP access list Block_Telnet

    10 deny tcp host 10.1.1.1 host 172.16.20.254 eq telnet

    20 permit ip any any

---

Troubleshooting IP Network Connectivity 

849

By verifying the IP addresses in the deny statement in line sequence 10, you can see that 

my source address is 10.1.1.1 and instead should have been 10.1.1.10.

Step 7: Fix and/or edit your access list. Delete the bad line and reconfigure the ACL to 

the correct IP.

R1(config)#