Showing posts with label CCNA. Show all posts
Showing posts with label CCNA. Show all posts

How to install Juniper ios in GNS

On By // No comments:

How to install and configure Juniper router Image with GNS3 all in one with VortualBox


Today we are going to share with all of you that how install and configure Juniper router ios on VirtualBox in GNS.
In this post we are sharing some way for using Juniper router on GNS3.

Before Installation we need the following software for this:

1: Juniper Image = JunOS Olive image VM (Please download Juniper ios from this link: Here)

2: Pre Installed GNS3

3: Pre Installed Oracle VM VirtualBox - (It's totally free download from internet)

Please follow step by step to install and configure Juniper router image with GNS3 all in one JunOS with VirtualBox:

Step 1: Right Click on JunOS Olive > open with >  VirtualBox > click on import > Select Juniper IOS > Ok.


It will look like.

Step 2: Open GNS3 All in one > Click on Preferences > Click on VirtualBox > click on New > select VM list such as JinOS 1 > Click on Finish > then Click on Ok.


Step 3: Juniper router will be appear on End device  >  Click on JunOS 1



Step 4 : Right click on JunOS 1 > Click on configure > Select Network tab > Change Adapters > ok.


Step 5: Now you can use so please click on device > start .
if you are facing any problem so you can use VirtualBox console. User name is root for this junOS VM



Hope this will help to all of you and resolved your all query if you have any query or question so you may ask to send email on our email account (onlinenetworkssolution@gmail.com) or leave comment on page.


Read More

Download Juniper Router IOS

On By // No comments:

How to download Juniper Router IOS  for GNS


Juniper Olive IOS is very excellent complementary tool to real work practice for Network engineer, administrator and other people who want practice and work on real juniper router. People who want to take certification of CCNA, CCNP, CCIE and another cisco certification Juniper Olive provide a good plate form for practice. This tool is open source and free program which used only for study purpose please don't use it in commercial.



JunOS Olive is a software which you can use on PC. Olive was used by Juniper internally for lab work, but now it become a source to learn the JUNOS CLI on a low-cost platform. Please note Junos olive is only for study and practice purposes , which is unsupported and unsupportable platform & it is not suitable for any type of commercial use.




Juniper Router IOS Download
user=root, without password


Hope this will help to all of you and resolved your all query if you have any query or question so you may ask to send email on our email account (onlinenetworkssolution@gmail.com) or leave comment on page.

Read More

Default Route in Router

On By // No comments:

How to Configure Default Route in Router on Packet Tracer?


Today we will learn that how to configure default route on Cisco router. Default route is a setting on a computer that defines the packet forwarding rule to use when no specific route can be determined for a given Internet Protocol (IP) destination address. All the IP datagrams with unknown destination address are sent to the default route.

Please see video to configure Default Route on Packet Tracer.


Please follow below steps to configure Default route in Router on Packet Tracer.

Default route in Router


Router1>en
Router1#config t
Router1(config)#int fa 0/0
Router1(config-if)#ip add 10.0.0.1 255.0.0.0
Router1(config-if)#no sh
Router1(config-if)#int fa 0/1
Router1(config-if)#ip add 1.0.0.1 255.0.0.0
Router1(config-if)#no sh
Router1(config-if)#exit
Router1(config)#ip route 0.0.0.0 0.0.0.0 10.0.0.2
Router1(config)#do wr




Router2>en
Router2#config t
Router2(config)#int fa 0/0
Router2(config-if)#ip add 10.0.0.2 255.0.0.0
Router2(config-if)#no sh
Router2(config-if)#int fa 0/1
Router2(config-if)#ip add 2.0.0.1 255.0.0.0
Router2(config-if)#no sh
Router2(config-if)#exit
Router2(config)#ip route 0.0.0.0 0.0.0.0 10.0.0.1
Router2(config)#do wr

Read More

acl configure in eigrp routing on gns3

On By // No comments:
How to configure ACL in EIGRP routing in Cisco router step by step?
How to configure multiple ACL in EIGRP routing in Cisco router on GNS?
Configure ACL in EIGRP routing in Cisco router on GNS3
ACL configuration in GNS3




Router 10 Configuration





R10#sh run

Building configuration...

Current configuration : 1341 bytes
!
! Last configuration change at 20:32:54 UTC Wed Aug 24 2016
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R10
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$M2jZ$dQeOhCr7iK.VsUyuaoWyg/
enable password justrelief
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
!
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
ip tcp synwait-time 5
!
interface Loopback1
 ip address 1.1.1.1 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface Serial1/0
 ip address 10.0.0.1 255.0.0.0
 serial restart-delay 0
!
interface Serial1/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
!
!
router eigrp 99
 network 1.0.0.0 0.0.0.255
 network 1.1.1.0 0.0.0.255
 network 10.0.0.0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 2
 privilege level 15
 password yogesh
 login
line vty 3 4
 login
!
!
End

Router 11 Configuration

R11#  sh run

Building configuration...

Current configuration : 1342 bytes
!
! Last configuration change at 20:34:39 UTC Wed Aug 24 2016
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R11
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$IDWr$SChqPe9TDAXCQr1z9ZmLN1
enable password line yogesh
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
ip tcp synwait-time 5
!
interface Loopback1
 ip address 3.3.3.3 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface Serial1/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/1
 ip address 30.0.0.2 255.0.0.0
 serial restart-delay 0
!
interface Serial1/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
!
!
router eigrp 99
 network 3.0.0.0 0.0.0.255
 network 3.3.3.0 0.0.0.255
 network 30.0.0.0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 2
 privilege level 15
 password yogesh
 login
line vty 3 4
 login
!
!
End

Router 3 Configuration

R3#sh run

Building configuration...

Current configuration : 2417 bytes
!
! Last configuration change at 22:34:15 UTC Wed Aug 24 2016
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$t3W6$YIsGKwajsualEs2hWbtjk/
enable password justrelief
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
ip tcp synwait-time 5
!
interface Loopback1
 ip address 2.2.2.2 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface FastEthernet1/0
 no ip address
 speed auto
 duplex auto
!
interface FastEthernet1/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface Serial2/0
 ip address 20.0.0.1 255.0.0.0
 serial restart-delay 0
!
interface Serial2/1
 ip address 10.0.0.2 255.0.0.0
 ip access-group 110 in
 serial restart-delay 0
!
interface Serial2/2
 ip address 30.0.0.1 255.0.0.0
 ip access-group 121 in
 serial restart-delay 0
!
interface Serial2/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface FastEthernet3/0
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface FastEthernet3/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
!
router eigrp 99
 network 2.2.2.0 0.0.0.255
 network 10.0.0.0
 network 20.0.0.0
 network 30.0.0.0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
access-list 110 deny   icmp host 10.0.0.1 host 40.0.0.1
access-list 110 deny   icmp host 10.0.0.1 host 50.0.0.1
access-list 110 deny   icmp host 10.0.0.1 host 50.0.0.2
access-list 110 deny   icmp host 10.0.0.1 host 6.6.6.6
access-list 110 permit ip any any
access-list 121 deny   icmp host 30.0.0.1 host 9.9.9.9
access-list 121 deny   icmp host 30.0.0.1 host 7.7.7.7
access-list 121 deny   tcp host 30.0.0.2 host 80.0.0.2 eq telnet
access-list 121 deny   tcp host 30.0.0.2 host 60.0.0.2 eq telnet
access-list 121 deny   tcp host 30.0.0.2 host 10.0.0.2 eq telnet
access-list 121 deny   icmp host 30.0.0.2 host 7.7.7.7
access-list 121 deny   icmp host 30.0.0.2 host 9.9.9.9
access-list 121 permit ip any any
!
!
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 2
 privilege level 15
 password yogesh
 login
line vty 3 4
 login
!
!
End

Router 13 Configuration

R13#sh run

Building configuration...

Current configuration : 1253 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R13
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$ObwQ$LhZPvSPc9uUygiOhMcyev0
enable password line yogesh
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
ip tcp synwait-time 5
!
interface Loopback1
 ip address 4.4.4.4 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface Serial1/0
 ip address 40.0.0.2 255.0.0.0
 serial restart-delay 0
!
interface Serial1/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
!
!
router eigrp 99
 network 4.4.4.0 0.0.0.255
 network 40.0.0.0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 2
 privilege level 15
 password yogesh
 login
line vty 3 4
 login
!
!
End

Router 1 Configuration

R1#sh run

Building configuration...

Current configuration : 1858 bytes
!
! Last configuration change at 22:35:32 UTC Wed Aug 24 2016
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$J4vr$MncxiLRCpJX3f7hRmuPom1
enable password Justrelief
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
ip tcp synwait-time 5
!
interface Loopback1
 ip address 5.5.5.5 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface Serial1/0
 ip address 20.0.0.2 255.0.0.0
 serial restart-delay 0
!
interface Serial1/1
 ip address 50.0.0.1 255.0.0.0
 serial restart-delay 0
!
interface Serial1/2
 ip address 40.0.0.1 255.0.0.0
 ip access-group 122 in
 serial restart-delay 0
!
interface Serial1/3
 ip address 60.0.0.1 255.0.0.0
 ip access-group 123 in
 serial restart-delay 0
!
!
router eigrp 99
 network 5.5.5.0 0.0.0.255
 network 20.0.0.0
 network 40.0.0.0
 network 50.0.0.0
 network 60.0.0.0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
access-list 122 deny   tcp host 40.0.0.2 host 30.0.0.2 eq telnet
access-list 122 deny   tcp host 40.0.0.2 host 10.0.0.2 eq telnet
access-list 122 deny   tcp host 40.0.0.2 host 70.0.0.2 eq telnet
access-list 122 permit ip any any
access-list 123 deny   tcp host 60.0.0.2 host 40.0.0.2 eq telnet
access-list 123 deny   tcp host 60.0.0.2 host 50.0.0.2 eq telnet
access-list 123 permit ip any any
!
!
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 password justrelief
 logging synchronous
 login
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 2
 privilege level 15
 password justreleif
 login
line vty 3 4
 login
!
!
end

Router 9 Configuration

R9#sh run

Building configuration...

Current configuration : 1278 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R9
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$zjv6$iA.kyvrwSQ5Y3CRc.IYrL/
enable password justrelief
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
ip tcp synwait-time 5
!
interface Loopback2
 ip address 6.6.6.6 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface Serial1/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/3
 ip address 60.0.0.2 255.0.0.0
 serial restart-delay 0
!
!
router eigrp 99
 network 6.0.0.0 0.0.0.255
 network 6.6.6.0 0.0.0.255
 network 60.0.0.0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 2
 privilege level 15
 password yogesh
 login
line vty 3 4
 login
!
!
End

Router 8 Configuration

R8#sh run

Building configuration...

Current configuration : 1275 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R8
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$hZcq$rymFAWQoLr/6cHMeJ3b941
enable password yogesh
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
ip tcp synwait-time 5
!
interface Loopback1
 ip address 7.7.7.7 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface Serial1/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/1
 ip address 80.0.0.2 255.0.0.0
 serial restart-delay 0
!
interface Serial1/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
!
!
router eigrp 99
 network 7.0.0.0 0.0.0.255
 network 7.7.7.0 0.0.0.255
 network 80.0.0.0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 2
 privilege level 15
 password yogesh
 login
line vty 3 4
 login
!
!
End

Router 4 Configuration

R4#sh run

Building configuration...

Current configuration : 2237 bytes
!
! Last configuration change at 22:37:22 UTC Wed Aug 24 2016
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R4
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$9rnx$K1Or9WBGGg9xxuaM8reLP1
enable password justrelief
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
ip tcp synwait-time 5
!
interface Loopback1
 ip address 8.8.8.8 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface Serial1/0
 ip address 50.0.0.2 255.0.0.0
 serial restart-delay 0
!
interface Serial1/1
 ip address 80.0.0.1 255.0.0.0
 ip access-group 124 in
 serial restart-delay 0
!
interface Serial1/2
 ip address 70.0.0.1 255.0.0.0
 ip access-group 125 in
 serial restart-delay 0
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface FastEthernet2/0
 ip address 13.0.0.1 255.0.0.0
 speed auto
 duplex auto
!
interface FastEthernet2/1
 no ip address
 shutdown
 speed auto
 duplex auto
!
!
router eigrp 99
 network 8.8.8.0 0.0.0.255
 network 50.0.0.0
 network 70.0.0.0
 network 80.0.0.0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
access-list 124 deny   icmp host 80.0.0.2 host 1.1.1.1
access-list 124 deny   icmp host 80.0.0.2 host 40.0.0.2
access-list 124 deny   icmp host 80.0.0.2 host 9.9.9.9
access-list 124 permit ip any any
access-list 125 deny   icmp host 70.0.0.2 host 10.0.0.1
access-list 125 deny   icmp host 70.0.0.2 host 80.0.0.1
access-list 125 deny   icmp host 70.0.0.2 host 80.0.0.2
access-list 125 deny   tcp host 70.0.0.2 host 20.0.0.1 eq telnet
access-list 125 deny   tcp host 70.0.0.2 host 20.0.0.2 eq telnet
access-list 125 deny   tcp host 70.0.0.2 host 30.0.0.2 eq telnet
access-list 125 deny   tcp host 70.0.0.2 host 30.0.0.1 eq telnet
access-list 125 permit ip any any
!
!
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 2
 privilege level 15
 password justrelief
 login
line vty 3 4
 login
!
!
End

Router 12 Configuration

R12#sh run

Building configuration...

Current configuration : 1280 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R12
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$xAl7$72lH3ZBb4dOziQbuYCF.S.
enable password justrelief
!
no aaa new-model
no ip icmp rate-limit unreachable
ip cef
!
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
!
ip tcp synwait-time 5
!
interface Loopback1
 ip address 9.9.9.9 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface Serial1/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial1/2
 ip address 70.0.0.2 255.0.0.0
 serial restart-delay 0
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
!
!
router eigrp 99
 network 9.0.0.0 0.0.0.255
 network 9.9.9.0 0.0.0.255
 network 70.0.0.0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 2
 privilege level 15
 password yogesh
 login
line vty 3 4
 login
!
!
end
Read More

acl configure in eigrp routing on cisco router

On By // No comments:
How to configure Access control list (ACL) in EIGRP routing on Cisco router?

ACL configure in EIGRP routing on Cisco router




Extended ACL (100-199)
Denies or permit: source ip address,
destination ip address, port(services)

Extended ACL (100-199)
Applied closest to the source






Router0 Configuration

Router0#sh run

Building configuration...

Current configuration : 675 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
enable password just@123
!
ip cef
no ipv6 cef
!
interface Loopback1
ip address 192.168.0.1 255.255.255.0
!
interface FastEthernet0/0
ip address 1.1.1.1 255.0.0.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
router eigrp 101
network 1.0.0.0
network 192.168.0.0
auto-summary
!
ip classless
!
ip flow-export version 9
!
!
!
no cdp run
!
line con 0
!
line aux 0
!
line vty 0 4
password 1234
login
!
!
!
end


Router1 Configuration

Router(config)#access-list 101 deny icmp host 1.1.1.1 host 3.3.3.4 echo
Router(config)#access-list 101 deny tcp host 1.1.1.1 host 3.3.3.4 eq telnet
Router(config)#access-list 101 deny tcp host 2.2.2.3 host 1.1.1.1 eq telnet
Router(config)#access-list 101 deny icmp host 2.2.2.3 host 1.1.1.1 echo
Router(config)#access-list 101 deny icmp host 2.2.2.3 host 192.168.0.1 echo
Router(config)#access-list 101 permit ip any any

Interface configuration

int fa 0/0
Router(config-if)#ip access-group 101 in
int fa 0/1

Router(config-if)#ip access-group 101 in

Router1#sh run

Building configuration...

Current configuration : 1065 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
!
!
enable password just@123
!
ip cef
no ipv6 cef
!
interface Loopback1
ip address 192.168.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 1.1.1.2 255.0.0.0
ip access-group 101 out
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 2.2.2.2 255.0.0.0
ip access-group 101 out
duplex auto
speed auto
!
router eigrp 101
network 2.0.0.0
network 1.0.0.0
network 192.168.1.0
auto-summary
!
ip classless
!
ip flow-export version 9
!
!
access-list 101 deny icmp host 1.1.1.1 host 3.3.3.4 echo
access-list 101 deny tcp host 1.1.1.1 host 3.3.3.4 eq telnet
access-list 101 deny tcp host 2.2.2.3 host 1.1.1.1 eq telnet
access-list 101 deny icmp host 2.2.2.3 host 1.1.1.1 echo
access-list 101 deny icmp host 2.2.2.3 host 192.168.0.1 echo
access-list 101 permit ip any any
!
line con 0
!
line aux 0
!
line vty 0 4
password 1234
login
!
!
!
end

Router 2 Configuration

Router(config)#access-list 101 deny icmp host 3.3.3.4 host 1.1.1.2 echo
Router(config)#access-list 101 deny icmp host 3.3.3.4 host 1.1.1.1 echo
Router(config)#access-list 101 deny icmp host 3.3.3.4 host 192.168.0.1 echo
Router(config)#access-list 101 deny tcp host 3.3.3.4 host 2.2.2.2 eq telnet
Router(config)#access-list 101 deny tcp host 3.3.3.4 host 1.1.1.2 eq telnet
Router(config)#access-list 101 deny tcp host 3.3.3.4 host 192.168.0.1 eq telnet


Router(config)#access-list 101 permit ip any any

Interface Configuration

 int fa 0/0

Router(config-if)#ip access-group 101 in

Router2#sh run
Building configuration...

Current configuration : 1117 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
!
!
enable password just@123
!
ip cef
no ipv6 cef
!
interface Loopback1
ip address 192.168.2.1 255.255.255.0
!
interface FastEthernet0/0
ip address 3.3.3.3 255.0.0.0
ip access-group 101 in
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 2.2.2.3 255.0.0.0
duplex auto
speed auto
!
router eigrp 101
network 192.168.2.0
network 2.0.0.0
network 3.0.0.0
auto-summary
!
ip classless
!
ip flow-export version 9
!
!
access-list 101 deny icmp host 3.3.3.4 host 1.1.1.2 echo
access-list 101 deny icmp host 3.3.3.4 host 1.1.1.1 echo
access-list 101 deny icmp host 3.3.3.4 host 192.168.0.1 echo
access-list 101 deny tcp host 3.3.3.4 host 2.2.2.2 eq telnet
access-list 101 deny tcp host 3.3.3.4 host 1.1.1.2 eq telnet
access-list 101 deny tcp host 3.3.3.4 host 192.168.0.1 eq telnet
access-list 101 permit ip any any
!
no cdp run
!
line con 0
!
line aux 0
!
line vty 0 4
password 1234
login
!
end

Router 3 Configuration

Router3#sh run

Building configuration...

Current configuration : 662 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
enable password just@123
!
ip cef
no ipv6 cef
!
!
interface Loopback1
ip address 192.168.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 3.3.3.4 255.0.0.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
router eigrp 101
network 3.0.0.0
network 192.168.3.0
auto-summary
!
ip classless
!
ip flow-export version 9
!
!
line con 0
!
line aux 0
!
line vty 0 4
password 1234
login
!
end

Check ACL configuration is working 

Ping

Router3#ping 1.1.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.2, timeout is 2 seconds:
UUUUU

Success rate is 0 percent (0/5)

Telnet

Router#telnet 2.2.2.2
Trying 2.2.2.2 ...

% Connection timed out; remote host not responding


Read More