Newsgroup: it.comp.reti.cisco
Titolo: 760 e Access-list

Ciao a tutti.
Qualcuno e' in grado di dirmi se su un CISCO 760 e' possibile implementare
una access-list?
...ovvero, posso impedire che alcuni IP address interni "escano" su
Internet?
Non sono riuscito a trovare nulla nella documentazione ufficiale.
Grazie in anticipo.
Ciao, l.b.
------------
Livio Berta
lbe...@etsteam.it

 Qualcuno e' in grado di dirmi se su un CISCO 760 e' possibile
implementare una access-list?
...... io ho fatto così: solo i PC con indirizzo IP 10.1.1.18, 10.1.1.19 e
10.1.1.20 possono alzare la connessione verso la sede remota.
761> ver
Software Version c760-i.bxd.NET3 4.3(1) - Feb 22 1999 21:28:17
Cisco 761
ISDN Stack Revision NET3 2.10
Copyright (c) 1993-1999 by Cisco Systems, Inc.  All rights reserved.
Software is used subject to software license agreement contained
with this product. By using this product you agree to accept the
terms of the software license.
Hardware Configuration:
   DRAM:  1.5MB
   Flash: 1.0MB
   POTS:  Not Installed
   NT1:   Not Installed
   ROM:   2.1(2)
Fila> upload
CD
SET SCREENLENGTH 20
SET COUNTRYGROUP 1
SET LAN MODE ANY
SET WAN MODE ONLY
SET AGE OFF
SET MULTIDESTINATION OFF
SET SWITCH NET3
SET ALAWVOICE ON
SET INTERNALTONES NONE
SET 1 DIRECTORYNUMBER 023333333
SET 1 DELAY 30
SET 2 DELAY 30
SET BRIDGING OFF
SET LEARN ON
SET PASSTHRU OFF
SET SPEED 64K
SET PLAN NORMAL
SET D   AUTO OFF
SET 1 AUTO ON
SET 2 AUTO ON
SET 1 NUMBER
SET 2 NUMBER
SET AODI OFF
SET 1 BACKUPNUMBER
SET 2 BACKUPNUMBER
SET 1 RINGBACK
SET 2 RINGBACK
SET 1 CLIVALIDATENUMBER
SET 2 CLIVALIDATENUMBER
SET CLICALLBACK OFF
SET CLIAUTHENTICATION OFF
SET SYSTEMNAME 761
LOG CALLS TIME VERBOSE
SET UNICASTFILTER OFF
DEMAND D THRESHOLD 0
DEMAND 1 THRESHOLD 0
DEMAND 2 THRESHOLD 48
DEMAND D DURATION 1
DEMAND 1 DURATION 1
DEMAND 2 DURATION 1
DEMAND D SOURCE LAN
DEMAND 1 SOURCE LAN
DEMAND 2 SOURCE BOTH
TIMEOUT D THRESHOLD 0
TIMEOUT 1 THRESHOLD 0
TIMEOUT 2 THRESHOLD 48
TIMEOUT D DURATION 0
TIMEOUT 1 DURATION 0
TIMEOUT 2 DURATION 0
TIMEOUT D SOURCE LAN
TIMEOUT 1 SOURCE LAN
TIMEOUT 2 SOURCE BOTH
SET AOCDTIMEOUT OFF
SET PASSWORD SYSTEM ENCRYPTED 094f195f44
SET REMOTEACCESS PROTECTED
SET LOCALACCESS ON
SET LOGOUT 5
SET CALLERID OFF
SET PPP AUTHENTICATION IN CHAP  PAP
SET PPP CHAPREFUSE NONE
SET PPP CHAPALLOW MULTIHOST OFF
SET PPP AUTHENTICATION OUT CHAP
SET PPP AUTHENTICATION ACCEPT EITHER
SET PPP TAS CLIENT 0.0.0.0
SET PPP TAS CHAPSECRET LOCAL ON
SET PPP CALLBACK REQUEST OFF
SET PPP CALLBACK REPLY OFF
SET PPP NEGOTIATION INTEGRITY 10
SET PPP NEGOTIATION COUNT 10
SET PPP NEGOTIATION RETRY  3000
SET PPP TERMREQ COUNT 2
SET PPP MULTILINK OFF
SET PPP MULTILINK PPPHEADER ON
SET COMPRESSION STAC
SET PPP BACP OFF
SET PPP ADDRESS NEGOTIATION LOCAL OFF
SET PPP IP NETMASK LOCAL OFF
SET IP PAT UDPTIMEOUT 5
SET IP PAT TCPTIMEOUT 30
SET IP RIP TIME 30
SET X25 LIC 0
SET X25 HIC 0
SET X25 LTC 0
SET X25 HTC 0
SET X25 LOC 1024
SET X25 HOC 1024
SET CALLDURATION 0
SET SNMP CONTACT ""
SET SNMP LOCATION ""
SET SNMP TRAP COLDSTART OFF
SET SNMP TRAP WARMSTART OFF
SET SNMP TRAP LINKDOWN OFF
SET SNMP TRAP LINKUP OFF
SET SNMP TRAP AUTHENTICATIONFAIL OFF
SET DHCP OFF
SET DHCP DOMAIN
SET DHCP NETBIOS_SCOPE
SET TPAD PARITY NONE
SET X25D TEI 0
SET X25D X121HOST
SET CALLTIME VOICE INCOMING OFF
SET CALLTIME VOICE OUTGOING OFF
SET CALLTIME DATA INCOMING OFF
SET CALLTIME DATA OUTGOING OFF
SET USER LAN
SET BRIDGING OFF
SET IP ROUTING ON
SET IP ADDRESS 10.1.1.254
SET IP NETMASK 255.255.255.0
SET IP FRAMING ETHERNET_II
SET IP PROPAGATE ON
SET IP COST 1
SET IP RIP RECEIVE V1
SET IP RIP UPDATE OFF
SET IP RIP VERSION 1
SET IP ROUTE DEST 
10.1.2.0/24
 GATEWAY 10.1.1.251 PROPAGATE OFF COST 1
SET USER Internal
SET IP ROUTING ON
SET IP ADDRESS 0.0.0.0
SET IP NETMASK 0.0.0.0
SET IP FRAMING ETHERNET_II
SET IP RIP RECEIVE V1
SET IP RIP UPDATE OFF
SET IP RIP VERSION 1
SET USER Standard
SET PROFILE ID 000000000000
SET PROFILE POWERUP ACTIVATE
SET PROFILE DISCONNECT KEEP
SET IP ROUTING ON
SET IP ADDRESS 0.0.0.0
SET IP NETMASK 0.0.0.0
SET IP FRAMING NONE
SET IP RIP RECEIVE V1
SET IP RIP UPDATE OFF
SET IP RIP VERSION 1
SET USER Prova
SET PROFILE ID 000000000000
SET PROFILE POWERUP ACTIVATE
SET PROFILE DISCONNECT KEEP
SET BRIDGING OFF
SET 1 NUMBER 022222222
TIMEOUT D DURATION 60
TIMEOUT 1 DURATION 60
TIMEOUT 2 DURATION 60
SET PPP AUTHENTICATION OUT NONE
SET PPP CLIENTNAME 761
SET PPP SECRET CLIENT ENCRYPTED 104d000a0618 
SET PPP SECRET HOST ENCRYPTED 110a1016141d 
SET PPP BACP OFF
SET IP ROUTING ON
SET IP ADDRESS 0.0.0.0
SET IP NETMASK 0.0.0.0
SET IP FRAMING NONE
SET IP RIP RECEIVE V1
SET IP RIP UPDATE OFF
SET IP RIP VERSION 1
SET IP ROUTE DEST 
205.230.19.0/24
 GATEWAY 205.230.19.254 PROPAGATE OFF COST
1
SET IP FILTER  OUT  SOURCE 
10.1.1.18/32
  ACCEPT
SET IP FILTER  OUT  SOURCE 
10.1.1.19/32
  ACCEPT
SET IP FILTER  OUT  SOURCE 
10.1.1.20/32
  ACCEPT
CD
SET SERIALPORT CONFIG
LOGOUT
Per maggiore sicurezza, sul Cisco 761 dell' altra sede ho configurato:
..........
SET IP ROUTE DEST 
10.1.1.0/24
 GATEWAY 10.1.1.254 PROPAGATE OFF COST 1
SET IP FILTER  IN  DESTINATION 
205.230.19.19/32
  ACCEPT
SET IP FILTER  IN  DESTINATION 
205.230.19.254/32
  ACCEPT
CD
SET SERIALPORT CONFIG
LOGOUT
In questo modo chi chiama questo router potrà parlare solo con gli
indirizzi IP 205.230.19.19 e 205.230.19.254