CCNA: Standard & Extended ACLs

The server LAN (192.168.100.0/24) is sensitive. Guests (PC2, 192.168.2.0/24) may not reach it at all; staff (PC1) may reach it.

Tasks

1. On R2 create standard ACL 10 that denies 192.168.2.0/24 and permits everything else.
2. Apply ACL 10 outbound on R2 Gi0/1 (close to the destination, as standard ACLs should be).
3. On R1 create extended named ACL NO-GUEST-PING that denies ICMP from 192.168.2.0/24 to R2 (10.0.12.2) and permits all other IP.
4. Apply it inbound on R1 Gi0/2 (close to the source, as extended ACLs should be).
5. Verify: PC1 reaches SRV (192.168.100.10), PC2 does not, and show access-lists shows matches.