CCNA全版PPT 3-07-ACL.pptVIP

Objectives Upon completing this module, you will be able to: Use Cisco IOS commands to configure standard and extended IP access lists, and NAT/PAT, given a functioning router Use show commands to identify anomalies in standard and extended IP access lists, given an operational router Objectives Upon completing this lesson, you will be able to: Explain the purpose of access lists and identify potential applications Describe how the Cisco IOS software processes standard and extended access lists on inbound and outbound interfaces Why Use Access Control Lists? Access List Applications Other Access List Uses How to Identify Access Lists Testing Packets with Standard Access Lists Testing Packets with Extended Access Lists Outbound ACL Operation A List of Tests: Deny or Permit Wildcard Bits: How to Check the Corresponding Address Bits Wildcard Bits to Match a Specific IP Host Address Wildcard Bits to Match Any IP Address Wildcard Bits to Match IP Subnets Summary Access lists offer a powerful tool for network control. These lists add the flexibility to filter the packet flow into or out of router interfaces. Such control can help limit network traffic and restrict network use by certain users or devices. An IP access list is a sequential list of permit and deny conditions that apply to IP addresses or upper-layer IP protocols. Access lists filter traffic going through the router, but they do not filter traffic originated from the router. Access lists are optional mechanisms in Cisco IOS software that you can configure to filter or test packets to determine whether to forward them to their destination or discard them. Summary (Cont.) Inbound access lists process incoming packets before they are routed to an outbound interface, while outbound access lists process packets to an outbound interface. The Cisco IOS software executes access list statements in sequential order, so the first statement is processed, then the next, and so on. Address filtering occurs using acc