""Catalin"" wrote in message
news:200211021650.QAA21112@;groupstudy.com...
> Here is my problem:
>
> 1) I have two subnets: 10.1.0.0 255.255.0.0 and 10.5.0.0 255.255.0.0
> 2) 10.5.0.0 should not access any resource on 10.1.0.0
> 3) 10.5.0.0 should have internet access
> 4) the internet access router is connected with both subnets: Ethernet 0/0
> 10.1.0.1 255.255.0.0 and Ethernet 0\1 10.5.0.1 255.255.0.0.
> 5) the wan link is on serial0\1.
> 6) the routing is eigrp
>
>
> So, the question is how to give internet access for 10.5.0.0.
> The internet router is a cisco 2611.
OK. First of all, have you drawn this out in a diagram? something like:
internet
|
router
e0 e1
10.1.0.0/16 10.5.0.0/16
Second - placement of access-lists
how many access-lists are required?
where?
which direction?
can the goal be accomplished with a single access-list?
well, it appears to me that you can do this in a single access-list if it is
thoughtfully constructed and placed.
Information you have - destination adresses that are forbidden
Infomration you don't have - destination addresses that are permitted (
internet 0
well- you have this information indirectly.
does this give you enough to get started?
>
>
> Thanks in advance.
>
> Catalin
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56749&t=56745
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]