Access List

[mansoor_nawaz78]

how can i creat an access list to permit only one ip to access my specific subnet, e.g

IP = 192.168.5.x

subnet Address = 255.255.255.128

only specific IP can telnet to the above subnet.

and i am also very thankfull if any one send me a link about access-list tutorial.

Thank You.

[pkhatri]

Assuming that you apply this ACL in an outbound direction on the interface that you are restricing access to, it would be something like this:

interface Ethernet0

ip access-group 10 out

!

access-list 10 permit host 192.168.5.1

With the above setup, only 192.168.5.1 will be able to access the LAN segment connected to Ethernet0.

Here's a link explaining ACLs:

http://www.cisco.com/en/US/customer/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

Hope that helps - pls do remember to rate posts that help.

Paresh

[mansoor_nawaz78]

ok thanks,

But when i access, to this web side, it ask to me for a CCO username and password,

2nd think, i would like to implement access-list on a layer 3 switch, which dont allow to access particular (IP's subnet), only single IP can access to this subnnet IPS.

[pkhatri]

Try this link instead:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

The config is the same even if it's on a layer 3 switch.

I would appreciate you rating the posts if they help.

Paresh