# Lab 06 - Firewall using ACL
> ***Objectives:***
> - Implement firewall between VLAN10 and VLAN20

## Configure Routers
On Routers `R1` and `R2`

```sh
enable
configure terminal
ip access-list extended FILTER
permit ip 10.20.0.0 0.0.255.255 host 10.10.10.10
deny ip 10.20.0.0 0.0.255.255 10.10.0.0 0.0.255.255
permit ip any any
exit
interface fastEthernet 0/0.20
ip access-group FILTER in
exit
exit
disable
exit
```