Konfigurasi Access-List

Konfigurasi Access-List

PC1
IP Address                 192.168.1.10
Subnet Mask             255.255.255.0
Gateway                    192.168.1.1

PC2
IP Address.                192.168.1.11
Subnet Mask             255.255.255.0
Gateway                    192.168.1.1

PC3
IP Address                  192.168.1.12
Subnet Mask              255.255.255.0
Gateway                     192.168.1.1

Konfigurasi server
IP Address                    192.168.2.1
Subnet Mask               255.255.255.0
Gateway                      192.168.2.254

konfigurasi Pada Router

Router :
Router>
Router>enable
Router#configure terminal
Router(config)#int fa 0/0
Router(config-if)#ip address 192.168.1.1 255.255.255.0
Router(config-if)#no shut
Router(config-if)#exit
Router(config)#int fa 1/0
Router(config-if)#ip address 192.168.2.254 255.255.255.0
Router(config-if)#no shut
Router(config-if)# (Ctrl+z)
Router#ping 192.168.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
Router#ping 192.168.2.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 

Konfigurasi Access-List
Router#configure terminal
Router(config)#interface fastethernet 0/0
Router(config-if)#ip access-group 1 in
Router(config-if)#exit
Router(config)#access-list 1 deny 192.168.1.10 255.255.255.0
Router(config)#access-list 1 permit any
Router(config)#exit
Router#show access-list
Standard IP access list 1
          deny 0.0.0.10 255.255.255.0 (2 match(es))
          permit any (8 match(es))

untuk mengembalikan access seperti sebelumnya :
Router#no access-list 1 

Lihatlah pada PC1 yang mengirim pesan ke server statusnya FILED, PC 1 adalah PC yang IP nya saya Block...