You are on page 1of 11

Objectives

Describe the usage and rules of access lists Establish standard IP access lists Apply access lists to interfaces Monitor and verify access lists Named access lists

www.cbtvid.com

ACL Page 1

What are ACLs

ACLs are lists of conditions that are applied to traffic traveling across a router's interface. These lists tell the router what types of packets to accept or deny. Acceptance and denial can be based on specified conditions. ACLs can be configured at the router to control access to a network or subnet.

www.cbtvid.com

ACL Page 2

OSI Reference Model

www.cbtvid.com

ACL Page 3

IP Packet

From TCP/IP Protocol Suite p.180 by Behrouz Forouzan McGrawHill

www.cbtvid.com

ACL Page 4

Types of ACL

Standard Extended

www.cbtvid.com

ACL Page 5

How ACL Works

Standard ACL

Permit Or deny

www.cbtvid.com

ACL Page 6

How to Identify different ACLs

Access List Types Number Range / Identifier


Standard Extended Name 1 - 99, 1300 - 1999 100 - 199, 2000 - 2600 Name

www.cbtvid.com

ACL Page 7

Scenario

192.168.2.0/24

www.cbtvid.com

ACL Page 8

192.168.1.0 192.168.1.1 192.168.1.2 192.168.1.3 . . . . 192.168.1.254

11000000.10101000.00000001.00000000 00000000.00000000.00000000.11111111 Wildcard mask 0.0.0.255 Subnet mask 255.255.255.0

www.cbtvid.com

ACL Page 9

Summary

ACLs are lists of conditions that are applied to traffic traveling across a router's interface.

Standard ACLs work based on source IP address.


Standard ACLs should be configured on the router and interface closest to the destination.

www.cbtvid.com

ACL Page 10

Reference
McQuerry, Stephen. (2008) Interconnecting Cisco Network Devices, Part 1 (ICND1): CCNA Exam 640-802 and ICND1 Exam 640-822, 2nd Edition Cisco Press ISBN: 978-1-58705-462-4 Forouzan, Behrouz. (2009). Tcp/ip protocol suite. McGrawHill. ISBN: 978-0070166783 Kelly Cannon, Kelly Caudle ,Anthony V. Chiarella (2009) CCNA Guide to Cisco Networking Fundamentals, International Edition, 4th Edition ISBN-13:9780840031198

www.cbtvid.com

ACL Page 11

You might also like