ACL question

[mahesh18]

Hi all,

I have one Extended Access list question to ask

if we have 2 pc with ip 5.1.1.8/24  and 5.1.1.10 /24  and we apply this acl on ethernet interface of router

with ip access-group 101 in

here  is acl

access-list 101 deny tcp 5.1.1.8 0.0.0.3 any eq 80

access-list permit ip any any

here we are blocking the internet access for users

my question is are we blocking the single user or all users in the 5.1.1.0 network?

i know when we want to deny single user we can use host or 0.0.0.0  as wilcard masks.

thanks

mahesh

[Jon Marshall · Accepted solution]

mahesh18 wrote:
Hi all,
I have one Extended Access list question to ask
if we have 2 pc with ip 5.1.1.8/24  and 5.1.1.10 /24  and we apply this acl on ethernet interface of router
with ip access-group 101 in
here  is acl
access-list 101 deny tcp 5.1.1.8 0.0.0.3 any eq 80
access-list permit ip any any
here we are blocking the internet access for users
my question is are we blocking the single user or all users in the 5.1.1.0 network?
i know when we want to deny single user we can use host or 0.0.0.0  as wilcard masks.
thanks
mahesh

Mahesh

5.1.1.8 0.0.0.3 = hosts 5.1.1.9, 5.1.1.10 & 5.5.1.11

Jon

[mahesh18]

Hi jon

Thanks one more time

regards

mahesh