ACCESS CONTROL LISTS

ACCESS CONTROL LISTS

1. ACL Operation

   • Purpose of ACLs
     • What is an ACL?
       • An ACL is a series of IOS commands that control whether a router forwards or drops packets based on information found in the packet header
     • Packet Filtering
     • ACL Operation
   • Wildcard Masks in ACLs
     • Introducing ACL Wildcard Masking
     • Calculating the Wildcard Mask
     • Wildcard Mask Keywords
   • Guidelines for ACL Creation
     • General Guidelines for Creating ACLs
     • ACL Best Practices
     • Where to Place ACLs
       • Extended ACLs
         • Locate extended ACLs as close as possible to the source of the traffic to be filtered
       • Standard ACLs
         • Because standard ACLs do not specify destination addresses, place them as close to the destination as possible

2. Standard IPv4 ACLs

   • Configure Standard IPv4 ACLs
     • Sintaxis de ACL estándar numerada IPv4
       • Router(config)# access-list número acl { deny | permit | remark } origen [ wildcard-origen ][ log ]
     • Applying Standard IPv4 ACLs to Interfaces
       • Router(config-if)# ip access-group { número-acl | nombre acl } { in | out }
     • Named Standard IPv4 ACL Syntax
   • Modify IPv4 ACLs
     • Method 1 - Use a Text Editor
     • Method 2 - Use Sequence Numbers
     • Editing Standard Named ACLs
   • Securing VTY ports with a Standard IPv4 ACL
     • The access-class Command

3. Troubleshoot ACLs

   • Processing Packets with ACLs
     • The Implicit Deny Any
     • The Order of ACEs in an ACL

Imágenes y archivos del mapa