click below
click below
Normal Size Small Size show me how
ACL
Access Control Lists
Question | Answer |
---|---|
What is the number range for Standard ACL? | 1-99 and 1300-1999 |
What is the number range for Extended ACL? | 100-199 and 2000-2699 |
What do Standard ACL only match? | They only match the source IP address |
What kind of mask do ACL use? | They use wildcard mask. |
What do the zero's in the wildcard mask for an ACL represent? | The zero's represent the bits that must match. |
What does the 255 in the wildcard mask for an ACL represent? | These are the considered the "T don't care bits" These bits do not have to match. |
What is at the end of all ACL? | An implicit deny. |
What word represents all 0 ? | host |
What word represents all 255 ? | any |
What command will show the ACL ? | show access-list |
What command applies the ACL to an interface ? | ip access-group |
What command is used to apply an ACL to the VTY lines ? | access-class |
Where should you place Extended ACL ? | Apply to incoming interface at the point closest to the host. |
Where should you place Standard ACL ? | Apply to the interface closest to the device that should not receive traffic from the source. |