In that topology I need to configure

  • will block host
  • will block network
  • All users can view web page but can't ping etc ...

I done that top 2 problems with extended named ACL, but I really can't third problem.

you can look my topology and read my config enter image description here

download full .pkt file ->https://megaup.net/8jat/lab6.pkt

HQ(config)#ip access-list extended web
HQ(config-ext-nacl)#permit tcp host any eq domain
HQ(config-ext-nacl)#permit tcp host any eq www
HQ(config-ext-nacl)#deny ip any any

and HQ int se0/0/0 is in and other interfaces are out.

Where did i lose ? Also can't so understand about in and out it'll helpful if you explain more detail.

closed as off-topic by Ron Trunk, Ron Maupin Apr 16 at 21:39

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "NE is a site for to ask and provide answers about professionally managed networks in a business environment. Your question falls outside the areas our community decided are on topic. Please visit the help center for more details. If you disagree with this closure, please ask on Network Engineering Meta." – Ron Trunk, Ron Maupin
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Looks like homework... – Zac67 Apr 16 at 18:23
  • Unfortunately, all "education, certification, or homework" questions are explicitly off-topic here. – Ron Maupin Apr 16 at 21:39
  • Oh i don't know that. Where can i ask ? – ByamBa Apr 16 at 22:22

"In" and "Out" are directions from the point of view of the router. So IN filters data coming from other devices into the router. OUT filters data exiting the router on one of its interfaces.

Not the answer you're looking for? Browse other questions tagged or ask your own question.