This document describes configuring an extended inbound access control list (ACL) on a Cisco 2611 router to deny FTP access from any computer to a device with an IP address of 192.168.2.2. It shows entering configuration mode on the router, adding an access list entry to deny TCP traffic on port 21 to that IP, permitting all other IP traffic, and applying the ACL to incoming traffic on an interface. The access list is then displayed to show the deny and permit entries.

1. Extended ACL Configuration on
Cisco 2611 XM
WWW.TCPIPGURU.COM

3. Description
 Extended Inbound ACL for Router 1 to deny FTP
access from any pc to 192.168.2.2 ip address.

4.  R1#config t
 Enter configuration commands, one per line. End with CNTL/Z.
 R1(config)#access-list 100 deny tcp any host 192.168.2.2 eq 21
 R1(config)#access-list 100 permit ip any any
 R1(config-if)#ip access-group 100 in
 R1#show ip access-lists
 Extended IP access list 100
 10 deny tcp any host 192.168.2.2 eq telnet
 20 deny tcp any host 192.168.2.2 eq ftp
 30 permit ip any any