CCNA ICND2 Lab 9 - Use Extended ACL to Block ping Command

Lab Requirements:

1. The router names are P4S1 and P4S2.

2. The S1/1 interface of P4S1 is connected to that of P4S2. The S1/1 interface of P4S2 is the DCE end.

3. Use the ping command on P4S1 to test the connectivity to P4S2 and access P4S2 from Telnet.

Lab Process:

1. Configure enable password and VTY password on P4S2. Both passwords are ciscobible.

2. Perform basic configurations on both routers.

2.1 Configure P4S1:

P4S1(config)#int s1/1

P4S1(config-if)#ip add 192.168.12.1 255.255.255.0

P4S1(config-if)#clock rate 64000

P4S1(config-if)#no shut

2.2 Configure P4S2:

Router(config)#host P4S2

P4S2(config)#enable password ciscobible

P4S2(config)#line vty 0 4

P4S2(config-line)#login

P4S2(config-line)#password ciscobible

P4S2(config-line)#exit

P4S2(config)#access-list 100 deny icmp any any

P4S2(config)#access-list 100 permit ip any any

P4S2(config)#int s1/1

P4S2(config-if)#ip add 192.168.12.2 255.255.255.0

P4S2(config-if)#no shut

P4S2(config-if)#ip access-group 100 in

P4S2(config-if)#exit

3.Authentication

Run the ping command on P4S1 to test the connectivity to P4S2. Data packets can reach P4S2.

Run the telnet command on P4S1 to access P4S2 successfully.