Setting Access-list Pada Cisco Router

Filed under: Computer & Networking — 3 Komentar

Maret 30, 2009

 

 

 

 

 

 

1 Vote

FUNGSI : Memblok satu PC atau lebih agar tidak bisa terkoneksi dengan jaringan luar (internet).
SOFTWARE : Packet Tracer 4.1

Berikut konfigurasi PC client dan cisco router
Konfigurasi PC0
IP Address. . . . . . . . . . . . : 192.168.12.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.12.123
Konfigurasi PC1
IP Address. . . . . . . . . . . . : 192.168.12.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.12.123
Konfigurasi PC2
IP Address. . . . . . . . . . . . : 192.168.12.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.12.123
Konfigurasi SERVER
IP Address. . . . . . . . . . . . : 192.168.2.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.1

Konfigurasi Router1

Router>en

Router#

Router#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface Serial2/0

Router(config-if)#ip address 202.170.56.1 255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#exit

Router(config)#interface Fa0/0

Router(config-if)#ip address 192.168.2.1 255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#exit

Konfigurasi Router0

Router>en

Router#

Router#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface Serial2/0

Router(config-if)#ip address 202.170.56.2 255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#exit

Router(config)#interface Fa0/0

Router(config-if)#ip address 192.168.12.123 255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#exit

NB:

- sebelumnya setting dulu protocol routing yang akan digunakan untuk menghubungkan Router1 dengan Router0 (pelajari tentang protocol routing)

- pada percobaan ini saya mempergunakan static routing.

SETTING ACCESS-LIST nya…

Router#configure terminal
Router(config)#ip route 192.168.12.0 255.255.255.0 202.170.56.1

Router(config)#interface Fa0/0

Router(config-if)#ip access-group 1 in
Router(config-if)#exit
Router(config)#access-list 1 deny 192.168.12.3 0.0.0.0
Router(config)#access-list 1 permit 0.0.0.0 255.255.255.255
Router(config)#exit

Router#

Hasil uji coba:

PC1 hanyaterkoneksi dengan LAN.