Security Fundamentals Intermediate ~7 min

Write an extended ACL

On R1, build extended ACL 100 with three entries in this order:

Permit tcp from any source to host 10.0.0.10 on port 80
Permit tcp from any source to host 10.0.0.10 on port 443
Deny all other ip traffic to that host

Verify with show access-lists.

Topology

Objectives

○Permit tcp any → 10.0.0.10 eq 80
○Permit tcp any → 10.0.0.10 eq 443
○Deny ip any → 10.0.0.10 (implicit or explicit)

Hints

Hint 1 — syntax

access-list 100 permit tcp <src> <dst> eq <port>. Use host X.X.X.X or any for source/destination.

Hint 2 — full sequence

enable
configure terminal
 access-list 100 permit tcp any host 10.0.0.10 eq 80
 access-list 100 permit tcp any host 10.0.0.10 eq 443
 access-list 100 deny ip any host 10.0.0.10
 end
show access-lists

← Previous task

Secure VTY lines for SSH only

Security Fundamentals · ~6 min