Answer Posted / shahin

Hi.... U didn't mention any ip address as well as interfaces
which r used to connect routers.

R1(s1/0)------(S1/0)R2 (S1/1) -------(S1/0)R3------- server1
! ! ! 10.1.1.1
! ! ! 10.1.1.10
! ! !
PC1 PC2 Server2
13.1.1.1 12.1.1.1 11.1.1.1
13.1.1.10 12.1.1.10 11.1.1.10

Note: First one IP address & second default gateway.

R1

s1/0 - 1.1.1.1

R2

s1/0 - 1.1.1.2
s1/1 - 2.2.2.1

R3

s1/0 - 2.2.2.2

I configured RIPv2 on all router & its working fine. Now i
can access each & every user & server from anywhere in the
network.

Point is that, u want to configure ACL, so that it will meet
ur requirements.

As u mention, "implemnt access list on the r3 router in such
a way that user from r1 can access only one server"... ok i
m goin to block user from R1 to access "server1"

Create Standard ACL -

R3#conf t
R3(config)#access-list 5 permit 12.0.0.0 0.255.255.255
R3(config)#access-list 5 deny any

Apply ACL -

R3(config)#interface fastEthernet 0/1
R3(config-if)#ip access-group 5 out
Router(config-if)#^Z

See the sh output -

Router#sh access-lists
Standard IP access list 5
permit 12.0.0.0 0.255.255.255 (4 match(es))
deny any (3 match(es))

Hey buddy.... i configure the same scenario in packet
tracer.. here i m pasting the the sh runing-config of routers -

***** Router 1 -

Current configuration : 652 bytes
!
output omitted
!
interface FastEthernet0/0
ip address 13.1.1.10 255.0.0.0
duplex auto
speed auto
!
interface Serial1/0
ip address 1.1.1.1 255.0.0.0
clock rate 128000
!
router rip
version 2
network 1.0.0.0
network 13.0.0.0
no auto-summary
!
ip classless
!!
end

**** Router 2 -
Building configuration...

Current configuration : 674 bytes
!
Output Omitted
!
interface FastEthernet0/0
ip address 12.1.1.10 255.0.0.0
duplex auto
speed auto
!
interface Serial1/0
ip address 1.1.1.2 255.0.0.0
!
interface Serial1/1
ip address 2.2.2.1 255.0.0.0
clock rate 128000
!
router rip
version 2
network 1.0.0.0
network 2.0.0.0
network 12.0.0.0
no auto-summary
!
ip classless
!!
end

****Router 3 -

Building configuration...

Current configuration : 748 bytes
!
Output Omitted
!
interface FastEthernet0/0
ip address 11.1.1.10 255.0.0.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.1.1.10 255.0.0.0
ip access-group 5 out
duplex auto
speed auto
!
interface Serial1/0
ip address 2.2.2.2 255.0.0.0
!
router rip
version 2
network 2.0.0.0
network 10.0.0.0
network 11.0.0.0
no auto-summary
!
ip classless
!
!
access-list 5 permit 12.0.0.0 0.255.255.255
access-list 5 deny any
!
!!
end

***** Outout from PC1 -

PC1>ping 10.1.1.1

Pinging 10.1.1.1 with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 10.1.1.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Hey buddy, i tried my best to explain as simple as possible
& as much as accuracy. Hope this gonna help u to do the work.

Cheers & enjoy the sunday/Funday.... heheheh

What are the advantages of using switches?

582

---

What is a vlan?

669

---

Explain on which interface we always apply access-list?

631

---

How many ports are present in a router?

682

---

What is the point-to-point protocol in ccna?

637

---

---

What is de-encapsulation?

722

---

Tell us the name of algorithm of eigrp protocol?

623

---

How are internetworks created?

815

---

Name which protocols are link states?

1086

---

How does RIP differ from IGRP?

659

---

What is the mesh network?

658

---

What are the steps of data encapsulation?

680

---

what is the matric of EIGRP protocol?

684

---

How do we do encryption and authentication in L2TP?

1702

---

What is default cost of serial interface in ospf?

656

---