Access Control List ??

[mccullrr]

What does this command mean?

ip access-list extended block
permit ip any host 129.71.63.97

I am trying to add a comment so that I can ping my wireless access points. Should the above do that?

Thanks,
Becky

 

[JOAMON]

It looks to be a named access-list. When applied it looks like it will allow access from any source to host 129.71.63.97. Remember that access-lists are order specific so if you have a deny before the permit it will not work.

 

[plshlpme]

and remember even though its not shown there is an implied deny any at the end of that access-list

 

[mccullrr]

My pc is 129.71.63.97 and say I want to ping 10.1.34.5. What should I put in there?

Thanks,
Becky

 

[plshlpme]

if you just wanted to ping that single device you would use
something like:

permit icmp host 129.71.63.97 host 10.1.34.5

but it depends on where and which direction your access-list is applied.

 

[mccullrr]

No such luck....

Here are excerpts from my router..

interface Vlan134
ip address 10.1.1.13 255.255.255.252
ip access-group block in
ip access-group block out
ip policy route-map students

and.....

ip access-list extended block
permit ip any host 129.71.63.97
permit ip host 10.42.1.244 any
permit tcp host 129.71.64.217 10.0.1.246 0.255.0.0 eq 445
permit tcp 10.0.1.246 0.255.0.0 host 129.71.64.217 eq 445
deny udp any any eq tftp log
deny tcp any any eq 135 log
deny udp any any eq 135 log
deny tcp any any eq 139 log
deny tcp any any eq 445 log
deny tcp any any eq 593 log
deny tcp any any eq 4444 log
deny udp any any eq netbios-ns log
deny udp any any eq netbios-dgm log
deny udp any any eq netbios-ss log
permit ip any any


Any thoughts??

 

[JOAMON]

Were exatly is your PC in relation to the wireless access point you are trying to ping? How is you network laid out?

 

[mccullrr]

My pc is in main building. It is a campus and I am trying to add the WAP to my What's Up Gold software for monitoring, but I can't ping the darn AP's. But I can ping them from the main router.

 

[JOAMON]

Enable terminal monitor
Debug the appropriate access-list and the ping it again.