4000 Router Series ACL and QoS Configuration Guide

# Create an IPv4 advanced ACL numbered 3000 and configure three rules in the ACL. One rule permits

access from the President's office to the financial database server, one rule permits access from the

Financial department to the database server during working hours, and one rule denies access from any

other department to the database server.

[RouterA] acl number 3000

[RouterA-acl-adv-3000] rule permit ip source 192.168.1.0 0.0.0.255 destination

192.168.0.100 0

[RouterA-acl-adv-3000] rule permit ip source 192.168.2.0 0.0.0.255 destination

192.168.0.100 0 time-range work

[RouterA-acl-adv-3000] rule deny ip source any destination 192.168.0.100 0

[RouterA-acl-adv-3000] quit

# Apply IPv4 advanced ACL 3000 to filter outgoing packets on interface Ethernet 1/1.

[RouterA] interface ethernet 1/1

[RouterA-Ethernet1/1] packet-filter 3000 outbound

[RouterA-Ethernet1/1] quit

Verifying the configuration

# Ping the database server from a PC in the Financial department during the working hours. (All PCs in

this example use Windows XP).

C:\> ping 192.168.0.100

Pinging 192.168.0.100 with 32 bytes of data:

Reply from 192.168.0.100: bytes=32 time=1ms TTL=255

Reply from 192.168.0.100: bytes=32 time<1ms TTL=255

Ping statistics for 192.168.0.100:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 1ms, Average = 0ms

The output shows that the database server can be pinged.

# Ping the database server from a PC in the Marketing department during the working hours.

C:\> ping 192.168.0.100

Pinging 192.168.0.100 with 32 bytes of data:

Request timed out.

Ping statistics for 192.168.0.100:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

The output shows the database server cannot be pinged.