Part VI - IPv4 Services

Part VI - IPv4 Services

1. Packet Filtering

   • deny
   • permit
   • any

2. ACLs

   • Named
   • Numbered
     • Extended 100-199
     • Additional std 1300-1999 ext 2000-2699
     • Standard 1-99
       • access-list {#} {dp} source {wildcard}
         • log at end
       • At Destination and IN
   • First match logic
     • no match = deny
   • 255 wildcard/ignore
     • 255.255.255.255 - subnet
       • range is IP + wildcard mask
   • # conf t
     • # access-list n permit y z
       • # int fa0/1
         • # ip access-group n in
   • sh ip access-lists / sh access-lists