ACL = Access List ( Firewall = System Pengamanan/Perthananan)

ROUTER :

Router>ena
Router#config t
Router(config)#int gi0/0
Router(config-if)#no sh
Router(config-if)#ip address 10.10.10.1 255.255.255.0
Router(config)#int gi0/1
Router(config-if)#no sh
Router(config-if)#ip address 20.20.20.1 255.255.255.0
Router(config-if)#int gi0/2
Router(config-if)#no sh
Router(config-if)#ip address 192.168.0.1 255.255.255.0

ALC/ACL

Router(config)#int gi0/1
Router(config-if)#ip access-group 100 out

Rules Access List (cisco Packet Tracert) :

Router(config)#access-list 100 permit icmp host 192.168.0.10 host 20.20.20.200 =
perintah membolehkan ping dari IP 0.10 ke IP 20.200
Router(config)#access-list 100 permit tcp host 192.168.0.10 host 20.20.20.100 eq
www = Untuk membolehkan IP 0.10 Internet ke IP 20.100
Router(config)#access-list 100 permit ip host 192.168.0.20 any = untuk membolehkan
IP 0.20 ke semua IP

end
deny any any = menolak semua paket (dari dan ke)

Router(config)#ip access-list extended 100

Router(config-ext-nacl)#
Router(config-ext-nacl)#permit icmp host 192.168.0.10 host 20.20.20.200
Router(config-ext-nacl)#permit tcp host 192.168.0.10 host 20.20.20.100 eq www
Router(config-ext-nacl)#permit ip host 192.168.0.20 any

SOAL :
1. PC 192.168.0.30 bisa ftp ke semua server
2. PC 192.168.0.40 hanya bisa ping dan browser ke server www.hidayatullah.sch.id

racker

access-list 100 deny any any