Hi,
I have been asked to create a acl for the following problem
There is a Router directly connected two networks (student and staff)
i have just put in two pcs to represent this
the student network is
202.1.1.0
the staff network is
202.1.2.0
My task is to create an acl that does the following
(a) allows staff to access the student network
(b) disallows all access from the student to staff
(c) but allows tcp (ack, etc etc)
so the router in middle student on left (interface fa0/0) and staff on right (interface fa0/1)
my acl is:
access-list 101 permit tcp 202.1.2.0 0.0.0.255 202.1.1.0 0.0.0.255 established
access-list 101 deny tcp 202.1.1.0 0.0.0.255 202.1.2.0 0.0.0.255 established
then went into fa0/0
ip access-group 101 in
then went into fa0/1
ip access-group out
but it fails when i ping wat is wrong?
