Contents
- 1 Why is it recommended to apply extended ACLs as close as possible to the source of the traffic to be filtered?
- 2 Which type of ACL should be placed as close to the source as possible?
- 3 What is the default action taken on all unmatched traffic through an ACL?
- 4 How is an extended access list ( ACL ) used?
Why is it recommended to apply extended ACLs as close as possible to the source of the traffic to be filtered?
Extended ACL Placement Example (4.4. Extended ACLs should be located as close to the source as possible to prevent unwanted traffic from being sent across multiple networks only to be denied when it reaches its destination.
Which type of ACL should be placed as close to the source as possible?
Extended ACL
Extended ACL “Should be placed closest to the source network.” because it filter base on much more specific criteria such as source, destination ip address, protocol and port number.
How do I change my extended ACL?
SUMMARY STEPS
- enable.
- configure terminal.
- ip access-list resequence access-list-name starting-sequence-number increment.
- ip access-list {standard | extended} access-list-name.
Where is standard ACL used?
Standard Access Control List (ACL) filters the traffic based on source IP address. Therefore a Standard Access Control List (ACL) must be placed on the router which is near to the destination network/host where it is denied.
What is the default action taken on all unmatched traffic through an ACL?
Which IP address range would be matched by the access-list 30 deny 172.30. What is the default action taken on all unmatched traffic through an ACL? Deny. If the access-list 1 permit host 1.2.
How is an extended access list ( ACL ) used?
It is one of the types of Access-list which is mostly used as it can distinguish IP traffic therefore the whole traffic will not be permitted or denied like in standard access-list . These are the ACL which uses both source and destination IP address and also the port numbers to distinguish IP traffic.
How to delete a line from the Extended ACL?
To delete a line from the extended ACL, use the delete command. Examples The following example deletes line 10 from the extended ACL testextacl. Related Commands (config-ext-nacl) list (config-ext-nacl) move delete Deletes the specified entry. line-num Identifies the entry at a specific line number in the access list.
What’s the range for an extended access list?
These are the ACL which uses both source and destination IP address and also the port numbers to distinguish IP traffic. In these type of ACL, we can also mention which IP traffic should be allowed or denied . These use range 100-199 and 2000-2699. Extended access-list is generally applied close to the source but not always.