Saturday, August 10, 2013

ACCESS LIST IN GNS3 WITH VMWARE



Access list used for filtering IP traffic, defining traffic to network address translate
(NAT).




In this scenario i am giving only remote access permission (RDP) from XP1 (192.168.10.10) to XP2(192.168.20.10).remaining all traffic from XP1 to XP2 well be bloking.

Configuration of R1

R1#conf t
R1(config)#int fa 0/0
R1(config-if)#ip address 192.168.10.1 255.255.255.0
R1(config-if)#no sh
R1(config-if)#exit
R1(config)#int fa 0/1
R1(config-if)#ip address 10.10.10.1 255.255.255.252
R1(config-if)#no sh
R1(config-if)#exit
OSPF Configuration for R1
R1(config)#router ospf 10
R1(config-router)#network 192.168.10.0 0.0.0.255 area 0
R1(config-router)#network 10.10.10.0 0.0.0.3 area 0
Access list Configuration for  R1
R1(config)#access-list 110 permit tcp host 192.168.10.10 host 192.168.20.10 eq 3389
R1(config)#access-list 110 deny tcp any any
R1(config)#int fastEthernet 0/0
R1(config-if)#ip access-group 110 in

R1(config-if)#exit




Configuration of R2

R2#conf t
R2(config)#int fa 0/0
R2(config-if)#ip address 192.168.20.1 255.255.255.0
R2(config-if)#no sh
R2(config-if)#exit
R2(config)#int fa 0/1
R2(config-if)#ip address 10.10.10.2 255.255.255.252
R2(config-if)#no sh
R2(config-if)#exit
OSPF Configuration for R2
R2(config)#router ospf 5
R2(config-router)#network 192.168.20.0 0.0.0.255 area 0
R2(config-router)#network 10.10.10.0 0.0.0.3 area 0


watch below video