cisco ccna 200-301 udemy download

cisco ccna 200-301 udemy download.Exam Points Keep in mind these two rules about where ACLs should be applied.21.4.1 Standard ACLsStandard ACLs can only be filtered based on the source IP address in the packet header and should be placed near the destination device to which access is to be denied to the source device. If a standard ACL is placed too close to the source device, it may result in the source device not being able to access the network inChapter 21 Access Control Lists 573other legitimate services. By placing the standard ACL as close to the target device as possible, you can allow the source device to access other resources while prohibiting it from accessing the remote target device.To see an example of where you should place a standard ACL, as shown in Figure 21.1. In this example, the user should be prohibited from(192.168.5.1) from accessing the server (192.168.1.1), and the corresponding ACL is configured as follows.Router(config)# access-list 1 deny host 192.168.5.1 Router(config)# access-list 1 permit anyIn this example, the goal is to deny user 192.168.5.1 access to the server (192.168.1.1), but allow everyone else to access the server. The following discusses the alternative ACL placement options. The first option is to place the ACL on Router C. If this is done, the192.168.5.1 will not be able to access 192.168.1.1, but neither will it be able to access all other devices. If you place the ACL on Router B, the user will be able to access network 192.168.4.0, but not the rest of the network. When placing this ACL on Router A, you actually have two choices: place it on interface E0 or E1. If it is placed on interface E1 in the inbound direction, the user will not be able to access the network 192.168.2.0, so it must be placed on router A on interface E0 in the outbound direction.