Help me answer this question!!

[Life_Under_Game]

Which set of access control entries would allow all users on the 192.168.10.0/24 network to browse to a web server that is located at 172.17.80.1, but would not allow them to use Telnet?

 

access-list 103 deny tcp host 192.168.10.0 any eq 23 access-list 103 permit tcp host 192.168.10.1 eq 80

access-list 103 permit tcp 192.168.10.0 0.0.0.255 any eq 80 access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23

access-list 103 permit 192.168.10.0 0.0.0.255 host 172.17.80.1 access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq telnet

access-list 103 permit tcp 192.168.10.0 0.0.0.255 host 172.17.80.1 eq 80 access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23

[Electronics Wizardy]

Don't use us to answer homework questions. 

 

What are these commands for?

[Windows7ge]

2 minutes ago, Electronics Wizardy said:

Don't use us to answer homework questions. 

 

What are these commands for?

These are CISCO router commands to configure managed CISCO routers.

[Lurick]

I'm not going to give you the answer because that would be too easy. Look at them and realize you want to allow a network to access a host so that eliminates one answer right away. Remember that you only want to allow them to access a specific IP and a specific port. That should help you narrow it down to the right answer

[Windows7ge]

If memory serves when entering ACL's into a router the actual port number must be specified and the wildcard mask needs to be used. When allowing or denying access to a specific system you may also wish to specify the host to which you are referring. (It's been a while so I don't guarantee my hints are correct.)

[harambe2]

Quote

access-list 103 permit 192.168.10.0 0.0.0.255 host 172.17.80.1
access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq telnet

IIRC this is the correct way to do it because it will allow connections to 172.17.80.1 and block telnet.

[Lurick]

1 hour ago, harambe2 said:

IIRC this is the correct way to do it because it will allow connections to 172.17.80.1 and block telnet.

Wrong, the question says to only allow HTTP traffic and the one you quoted would allow all connections to the server.