I am almost positive this is an issue of missing a key component or not declaring/applying the ACL properly, but I am unable to figure out the fix on my own. What I am trying to do is only allow PC2 to send any traffic to PC3 and PC1. Essentially PC4 should be inaccessible to PC2.
Since I am unable to post images yet, I will try to explain the topology which is very simple. PC1 and PC2 are behind SWITCH1 and SWITCH1 is connected to ROUTER0 on port f0/1. On the left side PC3 and PC4 are behind SWITCH2 and SWITCH2 is connected to ROUTER0 on port f0/0. The IPs are as follows:
- PC1 220.127.116.11/8 & Connected to f0/1 on SWITCH1
- PC2 18.104.22.168/8 & Connected to f0/2 on SWITCH1
- PC3 10.0.0.2/8 & Connected to f0/1 on SWITCH2
- PC4 10.0.0.3/8 & Connected to f0/2 on SWITCH2
- ROUTER0 f0/0 10.0.0.1/8 & Connects to f0/24 on SWITCH2
- ROUTER0 f0/1 10.0.0.2/8 & Connects to f0/24 on SWITCH1
The ACL as it exists now is as follows:
ip access-list extended NSL1 permit ip host 22.214.171.124 host 10.0.0.2
The problem is that devices on the left side of the topology (PC1 & 2) can no longer ping 126.96.36.199 or 10.0.0.1 when they were able to prior to implementing the ACL. It gives the "Destination host unreachable." error. PC1 also cannot ping anything on or to the right of the router, but I know that is because I have not put a permit statement in for it yet. Any help would be greatly appreciated. I would think it should be a simple fix, but I don't know since I don't have much experience with Cisco IOS.
Below is the full running-config of ROUTER0.
Router> Router>en Router#sh run Building configuration... Current configuration : 579 bytes ! version 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname Router ! ! ! ! ! ! ! ! ! ! ! ! ! ! spanning-tree mode pvst ! ! ! ! interface FastEthernet0/0 ip address 10.0.0.1 255.0.0.0 duplex auto speed auto ! interface FastEthernet0/1 ip address 188.8.131.52 255.0.0.0 ip access-group NSL1 in duplex auto speed auto ! interface Vlan1 no ip address shutdown ! ip classless ! ! ip access-list extended NSL1 permit ip host 184.108.40.206 host 10.0.0.2 ! ! ! ! ! line con 0 line vty 0 4 login ! ! ! end