ACLs

ACLs

1. Tipos

   • Standards
     • advantage
       • simple filtering purpose
       • NAT
       • Limiting Access on VTY lines
       • route filtering
       • Route- MAPs
     • only checks Source IP address
     • ACL number used - (1-99,1300-1399)
     • implemented near to destination
   • Extended
     • Advantage
       • TCP Intercept
       • VPN
       • Complex filtering
       • route filtering
       • IOS filtering
     • Checks for source and Desct IP and ports
     • ACL numbers used - (100-199,2000-2699)
     • implemented near to Source

2. Definição

   • Access-List is a method of providing basic level of network security

3. Função

   • Access-List is going to Filter incoming as well as outgoing traffic on the router interface

4. Access-List's can be created on the router

   • 1 per interface
   • 1 per port
   • 1 per direction

5. Numbered ACL X Named ACL

   • Removing of specific statement is not possible in Numbered ACL, It is possible in Named ACL

6. IPV4 ACL Versus IPV6 ACL

   • No standard ACL in IPV6
   • No wildcard mask in IPV6 ACL
   • In IPV6 only Named ACL's are available,there is no numbered ACL.

7. Access-group X Access-class

   • Access group usado para interfaces
   • Access class usado para lines

8. default action of ACL

   • Drop all traffic

9. Traffic not filtered by ACL

   • Traffic that is generated by the router itself, ACL is going to filter only transit traffic

10. Router ACL

    • used to filter traffic between two different networks or two different Vlans
    • applied in Inbound/Outbound direction
    • Applied for L3 and SVI

11. Port ACL

    • Inbound direction
    • For L2 interface
    • Filter IP and Non IP

12. VLAN ACL / VLAN Access Map

    • filter the traffic within the same network/VLAN