Jeremy's IT Lab CCNA Extended ACLs Day 35

[...] = IP protocol number 1

ICMP

[...] = IP protocol number 17[...] = IP protocol number 17

UDP

[...] = IP protocol number 6

TCP

[...] = IP protocol number 88

EIGRP

[...] = IP protocol number 89

OSPF

Configure an extended ACL entry, specifying protocol, source IP, and destination IP:

R1(config)#

access-list number {permit | deny} protocol src-ip dest-ip

(use either host before each IP address for /32, or specify a wildcard mask)

Configure an extended ACL entry, specifying protocol, source IP, and destination IP:

R1(config-ext-nacl)#

{permit | deny} protocol src-ip dest-ip

(use either host before each IP address for /32, or specify a wildcard mask)

Create an extended ACL entry to permit or deny all traffic:

R1(config-ext-nacl)# [...]

{permit | deny} ip any any

Delete an ACL entry by specifying the sequence number:

R1(config-std-nacl)# [...]

no sequence-number

EIGRP = IP protocol number [...]

88

Enter extended named ACL config mode:

R1(config)# [...]

ip access-list extended {name | number}

Extended numbered ACL ranges:

100-199, 2000-2699

ICMP = IP protocol number [...]

1

OSPF = IP protocol number [...]

89

Resequence an ACL:

R1(config)# [...]

ip access-list resequence acl-id starting-seq-num increment

TCP = IP protocol number [...]

6

UDP = IP protocol number [...]

17

What is the command to create an extended ACL entry, specifying the protocol, source/destination IP, and source/destination port?

R1(config-ext-nacl)# [...]

{permit | deny} protocol src-ip src-port dst-ip dst-port

*src-ip and dst-ip need the host keyword before or a wildcard mask after

*src-port and dst-port need a keyword such as eq before

Which command can be used to view which ACLs are applied to an interface?

R1# [...]

show ip interface interface-id

Which extended ACL entry command option?

[...] matches a single port.

eq port-num

Which extended ACL entry command option?

[...] matches all ports except the specified number.

neq port-num

Which extended ACL entry command option?

[...] matches all ports greater than the specified number.

gt port-num

Which extended ACL entry command option?

[...] matches all ports less than the specified number.

lt port-num

Which extended ACL entry command option?

[...] matches the specified range of ports.

range lowest-number highest-number

You [can/can't] delete individual ACL entries in global config mode.

can't

You [can/can't] delete individual ACL entries in named ACL config mode.

can