Corporate Headquarters

Step 2
hq-sanjose(config)#
access-list 102 deny udp any 
any
Configure access list 102 to deny all UDP traffic.
Step 3
hq-sanjose(config)#
access-list 102 permit ip 
any any
Configure access list 102 to permit all IP traffic.
Command
Purpose
Command
Purpose
Step 1
hq-sanjose(config)#
interface serial 1/0
Specify serial interface 1/0 on the headquarters router and 
enter interface configuration mode.
Step 2
hq-sanjose(config-if)#
ip access-group 102 in
Configure access list 102 inbound on serial interface 1/0 
on the headquarters router.
Step 3
hq-sanjose(config-if)#
ip access-group 102 out
Configure access list 102 outbound on serial interface 1/0 
on the headquarters router.
Step 4
hq-sanjose(config-if)#
exit
hq-sanjose(config)#
Exit back to global configuration mode.

---

3-39
Cisco IOS VPN Configuration Guide
OL-8336-01
Chapter 3 Site-to-Site and Extranet VPN Business Scenarios
Comprehensive Configuration Examples
Verifying Extended Access Lists Are Applied Correctly
To verify the configuration:
•
Enter the 
show ip interface serial 1/0
EXEC command to confirm the access list is applied correctly 
(inbound and outbound) on the interface.
hq-sanjose# 
show ip interface serial 1/0
Serial1/0 is up, line protocol is up
Internet address is 172.17.2.4
Broadcast address is 255.255.255.255
Address determined by setup command
Peer address is 172.24.2.5 
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is 102
Inbound access list is 102
-Display text omitted-