permit certain IPs

[boschrexroth]

Can someone tell me how to setup the ability to only allow a certain network to access one IP address.

I have a Cisco 3640 with two ethernet interfaces. I want the network on ethernet 2 (10.30.30.0) to only be able to access one IP address on ethernet 1 (10.20.20.20) via telnet.

It is running IOS 12.0(7).

Thanks,

Scott

[samsam_wang]

try

first

ip access-list 101 permit tcp 10.30.30.0 255.255.255.0 host 10.20.20.20 255.255.255.0 eq telnet

ip access-list 101 permit ip any any

then

int yourEthernet1

ip access-group 101 in

[#3]

Hi,

create access-list

access-list 101 permit 10.30.30.0 0.0.0.255 host 10.20.20.20 eq 21 ! permit telnet

access-list 101 deny ip 10.30.30.0 0.0.0.255 10.20.20.0 0.0.0.255 ! deny all other from 10.30.30.0

access-list 101 permit ip any any ! permit all for the rest

int eth1

access-group 101 out

jh

[#4]

sorry, typo: must be ... eq 23