click below
click below
Normal Size Small Size show me how
ACL
Access Control Lists
| Question | Answer |
|---|---|
| What is the number range for Standard ACL? | 1-99 and 1300-1999 |
| What is the number range for Extended ACL? | 100-199 and 2000-2699 |
| What do Standard ACL only match? | They only match the source IP address |
| What kind of mask do ACL use? | They use wildcard mask. |
| What do the zero's in the wildcard mask for an ACL represent? | The zero's represent the bits that must match. |
| What does the 255 in the wildcard mask for an ACL represent? | These are the considered the "T don't care bits" These bits do not have to match. |
| What is at the end of all ACL? | An implicit deny. |
| What word represents all 0 ? | host |
| What word represents all 255 ? | any |
| What command will show the ACL ? | show access-list |
| What command applies the ACL to an interface ? | ip access-group |
| What command is used to apply an ACL to the VTY lines ? | access-class |
| Where should you place Extended ACL ? | Apply to incoming interface at the point closest to the host. |
| Where should you place Standard ACL ? | Apply to the interface closest to the device that should not receive traffic from the source. |