What is the different between a computer and a server?

How to prevent a computer from accessing a server on a different network?

• i have 4 host with the ip address 192.168.1.2-5 /24 only host with ip 192.168.2.2 should have access to http server, the rest of the hosts including 192.168.2.2 should also have access to dns server. http server ip 192.168.3.2/24 dns server ip 192.168.3.3/24 these are the following command i typed on the cisco router to prevent access from that host, how can prevent multiple hosts just using one command. Router(config)#access-list 103 deny tcp host 192.168.2.3 host 192.168.3.2 eq 80 Router(config)#interface fa0/0 Router(config-if)#ip access-group 103 in i know how to prevent access to http server from each host, but i have to type one command per computer how can i prevent multiple hosts from accessing one server. remember of the host needs to have access to http. all computers should be able to ping the other network. thank you in advance for your help.

• Answer:

  I don't answer homework questions, but I give tips. 1. You can use subnets in acls, but the masks are inverted. So a subnet mask of 255.255.255.0 inverted would be 0.0.0.255. Inverted masks always use odd numbers (except for 0s) and they describe the number of host bits to be used, versus a regular mask which tells you the number of network bits. 2. Directionality of an ACL is important. 3. You are correct in using an extended ACL. Extended ACLs should usually on the interface closest to the destination of the traffic. 4. The 'any' descriptor is your catch all. 5. ACLs end in an implicit `deny ip any any` that doesn't show up in the config (unless you type it in). So by default anything not allowed by your ACL is denied. Hope this helps! If you post back your answer (if permitted) I will check them for you (if I see the update).