Belajar PPP dan Access-List

SKENARIO

R1
ip address s0/0(DCE) 172.16.10.1/24
ip address f0/0 192.168.10.1/24

R2
ip address s0/1(DTE) 172.16.10.2/24
ip address f0/0 192.168.20.1/24

PC1, ip address 192.168.10.10/24
PC2, ip address 192.168.20.10/24

Routing protocol: OSPF
Protocol WAN: PPP PAP

Skenario accesslist:
1. PC1 bisa ping ke PC2,tp tidak sebaliknya
2. Semua bisa telnet R1, kecuali PC2
3. Block PC2 dari akses TFTP di PC1

R1
Router>en
Router#conf t
Router(config)#hostname R1
R1(config)#enable secret cisco
R1(config)#line console 0
R1(config-line)#pass cisco
R1(config-line)#login
R1(config-line)#line vty 0 4
R1(config-line)#pass cisco
R1(config-line)#login
R1(config-line)#exit
R1(config)#int f0/0
R1(config-if)#ip add 192.168.10.1 255.255.255.0
R1(config-if)#no shut
R1(config-if)#int s0/0
R1(config-if)#description ***Link to R2***
R1(config-if)#ip add 172.16.10.1 255.255.255.0
R1(config-if)#clock rate 64000
R1(config-if)#bandwidth 512
R1(config-if)#encapsulation ppp
R1(config-if)#ppp authentication pap
R1(config-if)#ppp pap sent-username R1 pass R1-PAP
R1(config-if)#no shut
R1(config-if)#exit
R1(config)#username R2 pass R2-PAP
R1(config)#router ospf 10
R1(config-router)#net 192.168.10.0 0.0.0.255 area 0
R1(config-router)#net 172.16.10.0 0.0.0.255 area 0
R1(config-router)#exit
R1(config)#access-list 101 deny icmp 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255 echo
R1(config)#access-list 101 deny tcp 192.168.20.0 0.0.0.255 host 172.16.10.1 eq 23
R1(config)#access-list 101 deny udp host 192.168.20.10 host 192.168.10.10 eq 69
R1(config)#access-list 101 permit ip any any
R1(config)#int s0/0
R1(config-if)#ip access-group 101 in


R2
Router>en
Router#conf t
Router(config)#line console 0
Router(config-line)#pass cisco
Router(config-line)#login
Router(config-line)#exit
Router(config)#hostname R2
R2(config)#enable secret cisco
R2(config)#int f0/0
R2(config-if)#ip add 192.168.20.1 255.255.255.0
R2(config-if)#no shut
R2(config-if)#exit
R2(config)#int s0/1
R2(config-if)#description ***Link to R1***
R2(config-if)#ip add 172.16.10.2 255.255.255.0
R2(config-if)#bandwidth 512
R2(config-if)#encapsulation ppp
R2(config-if)#ppp authentication pap
R2(config-if)#ppp pap sent-username R2 pass R2-PAP
R2(config-if)#no shut
R2(config-if)#exit
R2(config)#username R1 pass R1-PAP
R2(config)#router ospf 10
R2(config-router)#net 192.168.20.0 0.0.0.255 area 0
R2(config-router)#net 172.16.10.0 0.0.0.255 area 0
R2(config-router)#exit