extended ACL help!!!!!!

[newbiex1001]

i need help to configure this in f0/0

1.Permit all TCP ftp (port 21) traffic from 192.168.200.10 to 192.168.100.11.

2.Permit all TCP http (port 80) traffic from 192.168.200.10 to 192.168.100.11.

3.Deny all other TCP traffic from 192.168.200.10 to 192.168.100.11

4.Permit all other IP traffic from any source to any destination.

 

[brianinms]

router(config)#ip access-list extended ACL_Name
router(config-ext-nacl)#permit tcp host 192.168.200.10 host 192.168.100.11 eq 21
router(config-ext-nacl)#permit tcp host 192.168.200.10 host 192.168.100.11 eq 20
router(config-ext-nacl)#permit tcp host 192.168.200.10 host 192.168.100.11 eq www
router(config-ext-nacl)#permit ip any any
router(config-ext-nacl)#^Z


You will then need to apply this ACL to the interface you desire, but seeing that I have no idea where these networks exist I can't tell you their direction it needs to be applied

 

[newbiex1001]

thank you much for the help, however, i wasn't able to get it to work

ip access-list extended ACL_Name was not recognized

 

[brianinms]

change ACL_NAME to what you want to name it

 

[burtsbees]

Just number it---it's a bit easier, and you can still modify it with release 12.1, or something like that...

Burt

 

[newbiex1001]

thank you guys, i am still stuck at first line

this is my screen

Chicago(config)#ip access-list extended 100
^

% Invalid input detected at "^" marker.

 

[brianinms]

So your router doesn't like config mode?

It should look like this


Chicago#
Chicago#config t
Chicage(config)#


Post a show ver.

 

[burtsbees]

I think he is pointing to the "ip access-list extended" part...
Unless he is at the
Chicago#
and is trying to type the whole thing at once, like "(config)#ip access-lsit extended 100"...

Burt

 

[plshlpme]

but then it would look like
Chicage#(config)#

i think the spacing on this forum is different then in the router and the ^ is just not in the right place.


need that show ver to see whats goin on.

 

[burtsbees]

Unless he is doing this...
Chicago#Chicago(config)#ip access-list extended 100

Burt

 

[plshlpme]

lol

 

[burtsbees]

I know, but I'd bet the farm that's what he did...lol

Burt

 

[eliotB]

maybe his router has an old IOS and doesn't support named IP access-lists.

try

NAME(config)# access-list 100 permit ip ..........