R1

enable
configure terminal
hostname R1

interface fastethernet 0/0

ip address 192.168.10.129 255.255.255.224
no shutdown
exit

interface serial 0/0/0

ip address 192.168.10.161 255.255.255.252
clock rate 250000
no shutdown
exit

router ospf 10
network 192.168.10.128 0.0.0.31 area 1
network 192.168.10.160 0.0.0.3 area 1
exit

exit
write

exit

---------------------------------------------
R2

enable
configure terminal
hostname R2

interface fastethernet 0/0

ip address 192.168.10.1 255.255.255.128
no shutdown
exit

interface serial 0/0/0

ip address 192.168.10.162 255.255.255.252
no shutdown
exit

router ospf 10
network 192.168.10.0 0.0.0.127 area 1
network 192.168.10.160 0.0.0.3 area 1
exit

exit
write

exit

-----------------------------------------------
Lista de control de acceso estndar

1) Se pide que slo la primera mitad de la red

192.168.10.128/27 tiene acceso ip al servidor
de la red.

Solucin:

Se configura la ACL-EST en R2

enable
configure terminal

access-list 1 permit 192.168.10.128 0.0.0.15

access-list 1 deny 192.168.10.144 0.0.0.15
access-list 1 permit any

interface fastethernet 0/0

ip access-group 1 out
exit

exit
write

exit

------------------------------------------------
Lista de control de acceso extendida

1) Se pide que el dispositivo 192.168.10.130/27 no

tenga acceso web al servidor, el resto de las redes
si tiene acceso al servicio.

Se configura la ACL-EXT en R1

enable
configure terminal

access-list 101 deny tcp 192.168.10.130 0.0.0.0 host 192.168.10.126 eq 80

access-list 101 permit ip any any

interface fastethernet 0/0

ip access-group 101 in
exit

exit
write

exit

-----------------------------------------------