In the previous video, we already learn about sequence number in access list. 2
Next, in this video, we are going to learn about named access list. 3
With named access list, we can configure access list with a name, not only with id. 4
If you remember, in the previous video, we configure access list with id 1, 5
remember that id 1 until 99 is standard access list and 100 until 199 is extended access list. 6
Beside using number like this, we can also configure access list with a name. 7
absolutely we still able to configure standard or extended access list 8
with named access list. In this case, we are going to learn about named standard access list first. 9
Okay let’s just start learning about named access list with an example case. Let’s say we want to 10
block everything and only permit from vlan 30, so vlan 10 and 20 to server should be blocked. 11
Let’s unassign access list 1 first, let’s see the configuration, do show run, 12
here in fa0/0, we assign the access list. Let’s remove this configuration, 13
no ip access-group 1 out. 14
Let’s see the configuration again, 15
okay here there is no access-group configuration anymore in fa0/0. 16
But the access list configuration is still exist. This configuration will not used, 17
because the access list is not assign to any interface, let’s try ping from vlan 20 to server, 18
okay here the ping is success. So access list 1 is not used anymore. 19
Let’s also ping from pc0 to the server, success, from vlan 30 to the server, 20
also success. Okay so now all pc is able to ping to the server again. 21
Now let’s create named access list to only permit from vlan 30. 22
If we configure access list with number, we can just type access-list and then the number, 23
but if want to configure named access list, the command is ip and then access list, 24
Then here we need to define which access list we want to configure, standard or extended. 25
In this case, we are going to configure standard access list. 26
And then here we need to define the name of access list. Or actually here we also still can use 27
a number. Let’s say the name is permit vlan 30. And then question mark here, 28
if we configure named access list like this, we can define a sequence number. 29
But for now I will not define the sequence number, 30
so the sequence number will be created automatically. 31
The case is to only permit from vlan 30, so let’s create a rule to permit vlan 30, 32
so here permit and then the network of vlan 30, which is 192.168.30.0 0.0.0.255. 33
Let’s see the access list, do show access-list. Here we can see that we have access list 1, 34
but this is not used anymore, and then here we have access list permit vlan 30, 35
and here we have a rule to permit from vlan 30. 36
remember that the case is to only permit from vlan 30, so vlan 10 and vlan 20 should be blocked. 37
If you remember, I already said that in access list, there is a default rule to deny any. 38
So for now from vlan 10 and vlan 20 is already blocked, because here 39
we only create a rule to permit vlan 30. So now the access list configuration is done. 40
Next let’s assign this access list to the interface, 41
let’s say we will assign the access list to fa0/0, 42
So interface fa0/0, ip access-group and then the name of the access list, 43
let’s just copy and paste, 44
And the direction is out.. okay we have done configuring access 45
list and assign the access list to the interface. Let’s test it, 46
vlan 30 to server, success, vlan 20 to the server, failed, vlan 10 to the server also failed. 47
Okay so now we have done configuring named access list. 48
I think enough for this video 49
Thank you for watching and see you on the next video.