Question

A network administrator must configure an extended ACL on router R1's Gigabit interface. The policy requires that hosts on the 192.168.20.0/24 network be blocked from sending ping (echo) traffic to the server at 10.1.1.50, but those same hosts must still be allowed to reach the server's web service on TCP port 80. Which ordered set of ACL statements accomplishes this requirement?

Accepted Answer

deny icmp 192.168.20.0 0.0.0.255 host 10.1.1.50 echo
permit tcp 192.168.20.0 0.0.0.255 host 10.1.1.50 eq 80

Answer

permit tcp 192.168.20.0 0.0.0.255 host 10.1.1.50 eq 80
deny icmp 192.168.20.0 0.0.0.255 host 10.1.1.50 echo

Answer

deny ip 192.168.20.0 0.0.0.255 host 10.1.1.50
permit tcp 192.168.20.0 0.0.0.255 host 10.1.1.50 eq 80

Answer

permit ip 192.168.20.0 0.0.0.255 host 10.1.1.50
deny icmp 192.168.20.0 0.0.0.255 host 10.1.1.50 echo