Extended IP Access Control Lists ExampleDeny FTP Access Through Interface E0

Non 81.199.108.0

81.199.108.10

81.199.108.225

81.199.108.226

E0

E1

S0

access-list 101 deny tcp 81.199.108.0 0.0.0.15 81.199.108.225 0.0.0.15 eq 21

access-list 101 deny tcp 81.199.108.0 0.0.0.15 81.199.108.225 0.0.0.15 eq 20

access-list 101 permit ip 81.199.108.225 0.0.0.15 0.0.0.0 255.255.255.255

interface ethernet 0

ip access-group 101 out

Previous slide

Next slide

Back to first slide

View graphic version