ccna collaboration pdf

ccna collaboration pdf.(3)Configuring Router R3 R3(config)#access-Jist 120 deny icmp host 172.16.23.2 host 172.16.23.3 echo log Deny ping request (echo request) packets from R2R3(config)#access-list 120 permit ip any any R3(config)#interface Serial0/0/l R3(config-if)#ip access-group 120 in(1) Check the IPv4 ACL and traffic matchingInitiate the packets denied by extended IPv4 ACL 110 on the relevant devices separately, and check the defined IPv4 on router R1Rl#show ip access-lists HOExtended IP access list 110 Extended IPv4 ACL and number 10 deny tcp 172.16.1.0 0.0.0.255 host 172.16.3.100 eq www (12 matches) 20 deny tcp 172.16.2.0 0.0.0.0.255 host 172.16.3.100 eq ftp (6 matches) 30 deny tcp 172.16.2.0 0.0.0.255 host 172.16.3.100 eq ftp-data (6 matches) 40 deny udp 172,16.1.0 0.0.0.0.255 host 172.16. 3.100 eq domain (4 matches) 50 deny tcp 172.16.1.0 0.0.0.255 host 172.16.23.3 eq telnet (4 matches) 60 deny tcp 172.16.1.0 0.0.0.0.255 host 172.16.3.3 eq telnet (8 matches) 70 deny tcp 172.16.2.0 0.0.0.255 host 172.16.12.2 eq www (8 matches) 80 deny tcp 172.16.2.0 0.0.0.0.255 host 172.16.23.2 eq www (8 matches) 90 deny icmp 172.16.1.0 0.0.0.255 host 172.16.3.100 (4 matches) 100 deny icmp 172.16.2,0 0.0.0.255 host 172.16.3.100 (4 matches) 110 permit ip any any (4 matches)The above output shows each conditional statement of the extended IPv4 ACL numbered 110 on router R. The number in parentheses indicates the number of packets matching the condition.(2) Viewing Log InformationYou can ping 172.16.23.2 on router R3, but you cannot ping 172.16.23.3 from router R2. because of the configured log parameter, the following log message appears on router R3: *Dec 30 04:21:25.895: %SEC-64PACCESSLOGDP: list 120 denied icmp 172.16.23.2 -> 172.16.23.3 (8/0), 4 packets (3) View extended IPv4ACL 120 on Router R3 R3#showip access-lists 120 Extended IPv4 ACL and No. 10 deny icmp host 172.16.23.2 host 172.16.23.3 echo log (5 matches) 20 permit ip any any (142matches)(4) Configuring Named Extension ACLs