Ai(config) line vty 04 Ri (config-Line) flogin Local Ai(confiq-Line) transport input ssh ft (config-Line) faccess-class 21 in ‘Ri (config-Line) fexit faccess-List 21 perait 192.168.10.0 0.0.0.255 RL (config) faccese-List 21 deny any Bi(contig) Vip access-list extended SURFING Ri (config-ext-nacl) fpermit tep 192.168.10.0 0.0.0.255 any eq 80 Ri (config-ext-nacl) fpemmit tep 192.168.10.0 0.0.0.255 any eq 443 Ri (configrext-nacl) fexit Fi (config) #ip access-List extended BROWSING Ri (config-ext-nacl) tpemit tep any 192.168.10.0 0.0.0.255 established Ri (configrex:-nacl) fexit Bi (config) Finterface g0/0 Ri (config-if) #ip accese-group SURFING in Fi (config-if) #ip accese-group BRONSING out Rifshow access-lists Extended IP access list BROWSING 10 permit tcp any 192.168.10.0 0.0.0.255 established Extended IP access list SURFING 10 permit tcp 192.168.10.0 0.0.0.255 any eq www 20 permit tep 192.168.10.0 0.0.0.255 any eq 443 Rif Rifshow ip interface 0/0 GigabitEthernet0/0 is up, line protocol is up Internet address is 192.168.10.1/24 ‘

-

‘Ri}show access-lists [Extended IP access list 110 10 deny tep 192.168.10.0 0,0.0.255 any (12 maten(es)) 0 20 permit tep 192.168-10. 30 permit ip any any 0.0.255 any eq telnet Rilshow access-list 120 Extended 1P accoss List 120 10 deny tep 192.168.10.0 0.0.0.255 any eq telnet 20 deny tcp 192-168.10-0 0.0.0.255 host 192.16 30 pernit top any any 92.12 0g ampBilcondis) Mp access-list extended SURFING Ri(contigrext-micl) (pamit top 192.168.10.0 0. (Ri (contig-ext-naci) fpemit top 192.160.10.0 0. Ri (conti grextrmicl) fexkt Ri(contig) H4p accass-List extended HROWSING i(contlevext-nacl) fpamit tep any 192.168-10.0 0.0.0.255 established i (contigrext-micl) fextt (contig) Yanvertace 90/0 i(contignif) Fap accese-group SURFING in i(contig-is) fap accese-group BROMSING out 258 any eq 80 258 any eg 449 Rifshow access-lists Extended IP access list BROWSING 10 permit tep any 192.168,10.0 0.0.0.255 established Extended IP access list SURFING 10 permit tep 192.168.10.0 0.0.0.255 any eq ww 20 permit tcp 192.168.10.0 0.0.0.255 any eq 443 Rit Rifshow ip interface 90/0 Gigabitethernet0/0 is up, line protocol is up Internet address is 192.168.10.1/24 '

'

Di. IP do orgen 21689010"Ejemplo 1 Ejemplo 2 BSsrssstessuzss Zsa esse SSeS Ejemplo 3 255.255.255.255 es ee [Ri (config-if) + ipv6 traffic-filter NO-R3-LAN-ACCESS in 192.168.10.10 0.0.0.0 |Ri (config) ipv6 access-List NO-R3-LAN-ACCESS: Ri (config-ipv6-acl) # deny ipv6 2001:db8: cafe: ‘Rl (config-ipvé-acl)# permit ipv6 any any i (config-ipv6-acl) # end nue 255.255.255.255 re (Coincidir todos los bits) (Omite todos tos bits) 192.168.40.10? re Se enare weiss {DP de angen (OO1:DBB:CAFE:10::10164 2001:088:CAFE:11::11164 2001:DB8:CAFE:30:12164