90 likes | 270 Views
Knowledge Nugget Become an ACL Wizard – Advanced ACL Editing. Bogdan Doinea - bdoinea@cisco.com Assoc. Technical Manager CEE, Russia&CIS Cisco Networking Academy. Basic types of ACLs The power of Named ACLs Tips and Tricks The trick to editing Numbered ACLs Technical DEMO.
E N D
Knowledge NuggetBecome an ACL Wizard – Advanced ACL Editing BogdanDoinea - bdoinea@cisco.com Assoc. Technical Manager CEE, Russia&CIS Cisco Networking Academy
Basic types of ACLs The power of Named ACLs Tips and Tricks The trick to editing Numbered ACLs Technical DEMO Become an ACL Wizard
Basic types of ACLs Numbered ACLs • Standard • Use only layer 3 source addresses • Extended • Can filter using layer3/4 information and by source/destination addresses • Limitations? • When editing, we can only add statements to the end of the ACL access-list 10 permit 192.168.146.0 0.0.1.255 access-list 101 permit tcphost 10.1.1.2 host 172.16.1.1 eqtelnet
The power of named ACLs • Named ACLs have sequence numbers for each entry • All ACLs have an implicit, invisible deny statement at the end • ONLY if they have at least one statement • Recommendation: you should always manually write the deny ip any any rule • in order to see if packets matched it ip access-list extended in_to_out permit tcp host 10.1.1.2 host 172.16.1.1 eqtelnet log deny ip any any
Working with Numbered and Named ACLs • Scenario • Ups! Forgot to give IP 10.1.1.3 access through ssh too! • Quick solution access-list101 permit tcphost 10.1.1.2 host 172.16.1.1 eqtelnet access-list101 permit tcphost 10.1.1.2 host 172.16.1.1 eqssh access-list 101 deny ip 10.1.1.0 0.0.0.255 host 172.16.1.1 ip access-list extended 101
Demo Casting: THE ROUTER CCNA
Useful links Instructor Professional Development One-stop-shop • http://lms.netacad.net – for more Knowledge nuggets • Learning through Gaming: Cisco Aspire • Become an ACL Wizard! • Passport 21 to Entrepreneurship Online communities • http://community.netacad.net • CCNA Topics dedicated to ACLs
Basic types of ACLs The power of Named ACLs Tips and Tricks The trick to editing Numbered ACLs Technical DEMO Summary