Up
CCNA Books
ICRC
OSI Reference
WAN Protocols
IOS
Network Protocols
Routing
Network Security
LAN Switching

GUESTBOOK
SIGN | VIEW

NETWORK SECURITY OBJECTIVES

44. Configure standard and extended access lists to filter IP traffic.

45. Monitor and verify selected access list operations on the router.

 

EXCELLENT

GREAT

LAB

Best Resources!

44. Configure standard and extended access lists to filter IP traffic.

• Extended
  • Standard
    • Source
    • Destination
  • Source socket
  • Destination socket
  • Protocol type (TCP, UDP, ICMP)

45. Monitor and verify selected access list operations on the router.

Logged when IP access-list logging is enabled

• Access list number.
• Source address and port.
• Destination address and port.
• Number of packets and protocol.

Display command

• Interface with IP access lists' set & applied ports
  • sh run
  • sh ip int
• ip / ipx access lists
  • sh run
  • sh access-lists
  • sh [ip/ipx] int
• Extended access list 144
  • sh ip access-list
  • sh access-list 144

Other command

• Access lists being hit
  • log
• Apply ipx sap access list 1001 for incoming traffic
  • ipx input-sap-filter 1001