cisco ccna 200-301 lab kit

cisco ccna 200-301 lab kit.Also, note the command to apply ACLs to the line: access-class, which is different from the command to activate ACLs on the router interface. If the parameter in is specified, access to the router is restricted via Telnet and SSH. The out parameter is special in that it restricts which target devices can be accessed on the router using the commands telnet, connect, or ssh. This is an exception to the standard ACL, allowing the router to treat the address in the ACL statement as the target address: the router compares the address in the telnet command with that address, and only allows the user to Telnet from the router to the specified target device if they match.The following is a simple example that uses a standard ACL to filter Telnet traffic sent to the router.Router(config)# access-list 99 permit 192.168.1.0 0.0.0.255 Router(config)# line vty 0 4 Router(config-line)# access-class 99 inChapter 21 Access Control Lists 561In this example, only devices in 192.168.1.0/24 are allowed to Telnet or SSH to this router. Because of an implicit deny statement at the end of access-list 99, all other connections to the router via VTY are disconnected. A multimedia demonstration of configuring a standard numbered ACL to restrict access to the router via Telnet is included in the companion digital resource to this book.As you will see in the next section, extended ACLs can also be used to restrict access to I0S devices, but are much more complex to configure. Second, extended ACLs are applied to the interface, so you cannot restrict Telnet access from the router to a remote target device. Third, whenever you apply an ACL to a router interface, it will affect the performance of that interface. The impact on performance depends on the router model, the I0S version, and the features that have been enabled (if you are using the latest IOS version, applying an ACL on an interface will have little to no impact on performance). Therefore, if you only want to filter Telnet and SSH traffic to and from the router, the best option is to apply a standard ACL to the VTY using the command access-class.To restrict Telnet and SSH access to the IOS device, you can protect the VTY by enabling login (requiring a password or username and password) while applying the standard ACL to the VTY line using the line sub-configuration mode command access-class ° Note that this can also be done using extended ACLs, but requires more configuration.Hands-on Exercise 21.1Configuring Standard Numbered ACLsThe previous sections discussed the configuration of standard numbered ACLs, and to deepen your understanding of these, this exercise will allow you to configure a standard numbered ACL on your router to restrict access to it. You will use the BosonNetSim simulator to complete this experiment; see the Preface section of this book for a schematic of the network used by the simulator. In this exercise, you will first configure static routes on two routers (2600-1 and 2600.2) and check network connectivity 4 raw. Next, you will configure ACLs. launch this simulator and click the tab Labs. and then click the tab McGraw-Hill in the upper left corner (tab Standard and Custom to the right). Next, double-click Exercise21-1, which will load the experimental configuration based on the exercises in Chapter 10 and Chapter 15.