question about acl

[JenZebra]

Hi everyone! I have a question that's actually related to another post (question on CCNA exam re acl):

y2k1981 wrote:
"It's the usual physical setup, three routers connected in a line each with a switch and two workstations from the switch. The question goes something like this:

Configure and apply an access list to block telnet acces to all networks attached to router3. the list should contain no more than 3 lines etc etc etc

Let's assume that the E0 interface on Router 3 is 192.168.3.1 and S0 is 192.168.2.1. Should my access list read something like this:

access-list 101 deny tcp any 192.168.3.0 0.0.0.255 eq 23
access-list 101 deny tcp any 192.168.2.0 0.0.0.255 eq 23
access-list 101 permit ip any

and should it then be applied to the outbound traffic on E0 and S0?"



My question is, what would happen if you created the acl to look like this:
access-list 101 deny tcp any any eq 23
access-list 101 permit ip any any

Would that also work?

Thank you!

 

[rburke]

As far as the information you gave in the question then that should work just fine. You fulfilled the requirements by denying access to ALL port 23 (telnet) traffic. Then you just apply that ACL inbound on each port that needs to be filtering the traffic.

Good work.

Burke

 

[JenZebra]

Thank you!