1
resposta

Todos as máquinas acessam a página HTML

Olá, pessoal. Tudo bem?

Fiz os procedimentos referentes a essa aula para criar a ACL, porém todas as máquinas continuam tendo acesso a página HTML normalmente. É como se a lista não estivesse sendo criada. Aqui estão as configurações feitas no roteador.

Router#show running-config 
Building configuration...

Current configuration : 1384 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
!
!
!
ip dhcp excluded-address 172.16.0.2
ip dhcp excluded-address 172.16.2.131
!
ip dhcp pool VLAN10
 network 172.16.0.0 255.255.254.0
 default-router 172.16.0.1
ip dhcp pool VLAN20
 network 172.16.2.128 255.255.255.128
 default-router 172.16.2.129
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface FastEthernet0/0
 no ip address
 duplex auto
 speed auto
!
interface FastEthernet0/0.1
 encapsulation dot1Q 10
 ip address 172.16.0.1 255.255.254.0
 ip access-group SERVIDOR-GERENTES in
!
interface FastEthernet0/0.2
 encapsulation dot1Q 20
 ip address 172.16.2.129 255.255.255.128
 ip access-group SERVIDOR-GERENTES in
!
interface FastEthernet0/0.3
 encapsulation dot1Q 30
 ip address 172.16.3.1 255.255.255.128
!
interface FastEthernet0/1
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface Vlan1
 no ip address
 shutdown
!
ip classless
!
ip flow-export version 9
!
!
ip access-list extended SERVIDOR-GERENTES
 permit tcp host 172.16.2.131 host 172.16.3.2
 permit tcp host 172.16.0.2 host 172.16.3.2
 deny tcp 172.16.2.0 0.0.0.255 host 172.16.3.2
 permit ip any any
 permit tcp host 172.16.3.131 host 172.16.3.2
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end

Agradeço desde já o retorno.

1 resposta

Bom dia, é necessário configurar nas interfaces, segue o passo a passo: !!No roteador!!:

  1. enable
  2. configure terminal
  3. interface fastEthernet 0/0.1
  4. ip access-group SERVIDOR-GERENTES in
  5. exit

*E repita o processo para a outra interface: *

  1. interface fastEthernet 0/0.2
  2. ip access-group SERVIDOR-GERENTES in