Day 34 CCNA - Standard ACLs
Call Kai
Learn
Practice Test
Spaced Repetition
Match
Flashcards
Knowt Play1/21
There's no tags or description
Looks like no tags are added yet.
Name | Mastery | Learn | Test | Matching | Spaced | Call with Kai | Chat |
|---|
No analytics yet
Send a link to your students to track their progress
22 Terms
What does ACL stand for?
Access Control List
ACLs are an ordered sequence of [...]
ACEs (Access Control Entries)
ACLs must be [...] to take effect.
applied to an interface
ACLs can be applied to an interface [...] or [...]
inbound / outbound
In what order do routers check the ACEs of an ACL?
Top to bottom
When a packet matches an ACE in an ACL, what happens to the remaining entries below the matching entry?
They are ignored (not checked/processed)
How many ACLs can be applied to a single interface?
Two:
one inbound
one outbound
What will happen if a packet doesn't match any of the entries in an ACL?
It will be dropped
('implicit deny')
The [...] tells the router to deny all traffic that doesn't match any of the configured entries in the ACL.
implicit deny
[...] IP ACLs can match based on source IP address only.
Standard
[...] IP ACLs can match based on source/destination IP address and source/destination Layer 4 port.
Extended
What ranges of numbers can be used to identify standard numbered ACLs?
1-99, 1300-1999
Configure a standard numbered ACL entry, specifying the IP/mask.
R1(config)# [...]
access-list number {deny | permit} ip wildcard-mask
Configure a standard numbered ACL entry, permitting or denying all source IPs.
R1(config)# [...]
access-list number {deny | permit} any
Configure a remark for standard numbered ACL:
R1(config)# [...]
access-list number remark remark
View all ACLs on the router:
R1# [...]
show access-lists
View all IP ACLs on the router:
R1# [...]
show ip access-lists
Standard ACLs should be applied as close to the [...] as possible.
destination
[...] ACLs should be applied as close to the destination as possible.
Standard
Apply an ACL to an interface:
R1(config-if)# [...]
ip access-group acl {in | out}
Enter standard named ACL config mode:
R1(config)# [...]
ip access-list standard acl-name
Configure a permit or deny entry for a standard named ACL:
R1(config-std-nacl)# [...]
[entry-number] {deny | permit} ip wildcard-mask