Creating a Standard Access List
Create an access-list and configure the same according to a given set of rules.
Instructions:
1. Enter into Global Configuration Mode
2. Create an IP access-list to permit traffic from address 192.168.20.8, and deny all other traffic.
use 1 as IP access-list number.
3. Create an access-list 2 that blocks only the single IP address 200.165.15.5.
4. Type the command used for permitting packets from any IP Address.
use Access-list number as 2
use the following command:
R1>enable
R1#configure terminal
R1(config)#access-list 1 permit 192.168.20.8
R1(config)#access-list 2 deny 200.165.15.5
R1(config)#access-list 2 permit any
* The above configuration allows only ip address 192.168.20.8 or host to gain access to the network and denies other addresses from the entire subnet.
** The second part of the configuration denies IP address 200.165.15.5 or host from gaining entrance to the network and permits other addresses form the network.
