cisco ccna 3 chapter 1 answers

cisco ccna 3 chapter 1 answers.. The command access-list is used to create an ACL, and the command ip access-group is used to activate it on the interface ACLO can filter traffic as it enters the interface (in) and as it leaves the interface (out) 0 To delete the entire access control list, use the command no access-list and specify its number.. Standard IP ACLs use a numbering range of 1.99 and 1300.1999 and extended IP ACLs use a numbering range of 100.199 and 2000.2699. . A wildcard mask is like an inverted subnet mask. A 0 in the wildcard mask means that the address in the condition and the corresponding bit of the address in the IP packet must be the same, and a 1 means that they do not have to be. . The wildcard mask 0.0.0.0 means that the entire address must match; the keyword host precedes the address and is equivalent. Wildcard mask 255.255.255.255 means match any address: the address and such a wildcard mask can be replaced with the keyword any.. To convert a subnet mask to a wildcard mask, subtract 255 from the value of each byte of the subnet mask to get the value of the corresponding byte in the wildcard mask.ACL Type.. Standard ACLs can only be filtered based on the source IP address. If no wildcard mask is specified, it defaults to O.O.O.Oo To restrict Telnet access to the router, use the command access-class to activate the standard ACLO. To view console output on a non-console connection (such as a VTY), use the command terminal monitor0. Extended IPACLs allow you to filter based on source and destination IP addresses (you must specify wildcard masks for them), IP protocols (TCP, UDP, ICMP, etc.), and protocol information (such as ICMP message types or TCP/UDP source and destination port numbers). To match all IP traffic, specify the protocol as the keyword ip.. To create a named ACL, use the command ip access-list {standard | extended} ACL name, which switches to ACL sub-configuration mode.. To add comments to ACL statements, use the argument remarko. To display the configured ACLs and which interfaces they are applied to, use the command show running-configo To display the ACLs that are active on the router interface, use the command show ip interfaceso To display the ACL statements, use the command show |ip] access-listso