Paipa(config)#access-list 101 deny tcp 192.168.6.0 0.0.0.

31 any eq 23
Paipa(config)#access-list 101 deny icmp 192.168.6.0 0.0.0.31 192.168.6.32 0.0.0.31
echo
Paipa(config)#access-list 101 deny icmp 192.168.6.0 0.0.0.31 192.168.6.64 0.0.0.15
echo
Paipa(config)#access-list 101 deny icmp 192.168.6.0 0.0.0.31 192.168.6.80 0.0.0.15
echo
Paipa(config)#access-list 101 deny icmp 192.168.6.0 0.0.0.31 192.168.6.96 0.0.0.15
echo
Paipa(config)#access-list 101 permit ip any any

Enter configuration commands, one per line. End with CNTL/Z.

Paipa(config)#int gig0/0
Paipa(config-if)#ip access-group 101 in
Paipa(config-if)#exit
Paipa(config)#
-----------------------------------------------------------------------------------
------------------------------------------------------------

------------ACL OPCION 1 , BLOQUEAR IP (ICMP) DE VISITANTES A LAS OTROS

DEPARTAMENTOS, PERO ESTOS PUEDEN HACER PING A VISITANTES, VISITANTES PUEDE HACER
PING A ROUTER DE LA SUCURSAL
Paipa#config t
Enter configuration commands, one per line. End with CNTL/Z.
Paipa(config)#access-list 101 deny tcp 192.168.6.0 0.0.0.31 any eq 23
Paipa(config)#access-list 101 deny icmp 192.168.6.0 0.0.0.31 192.168.6.32 0.0.0.31
echo
Paipa(config)#access-list 101 deny icmp 192.168.6.0 0.0.0.31 192.168.6.64 0.0.0.15
echo
Paipa(config)#access-list 101 deny icmp 192.168.6.0 0.0.0.31 192.168.6.80 0.0.0.15
echo
Paipa(config)#access-list 101 deny icmp 192.168.6.0 0.0.0.31 192.168.6.96 0.0.0.15
echo

Paipa(config)#access-list 101 permit ip any any

Paipa(config)#int gig0/0.10
Paipa(config-subif)#ip access-group 101 in
Paipa(config-subif)#exit
Paipa(config)#exit
Paipa#
%SYS-5-CONFIG_I: Configured from console by console

Paipa#show access-list
Standard IP access list 1
10 permit 192.168.6.64 0.0.0.15
Extended IP access list 101
10 deny tcp 192.168.6.0 0.0.0.31 any eq telnet
20 deny icmp 192.168.6.0 0.0.0.31 192.168.6.32 0.0.0.31 echo
30 deny icmp 192.168.6.0 0.0.0.31 192.168.6.64 0.0.0.15 echo
40 deny icmp 192.168.6.0 0.0.0.31 192.168.6.80 0.0.0.15 echo
50 deny icmp 192.168.6.0 0.0.0.31 192.168.6.96 0.0.0.15 echo
60 deny icmp 192.168.6.0 0.0.0.31 20.0.1.0 0.0.0.7 echo
70 permit ip any any
Paipa#
------------------ACL OPCION 2, BLOQUEAR PING DE VISITANES A TODAS LAS RED,
INCLUIDO HOST, PERO ESTOS PUEDEN HACER PING A VISITANTES, INCLUIDO EL ROUTER
Paipa(config)#access-list 102 deny icmp 192.168.6.0 0.0.0.31 any echo
Paipa(config)#access-list 102 permit ip any any
Paipa(config)#int gig0/0.10
Paipa(config-subif)#ip access-group 102 in
Paipa(config-subif)#