cisco certification books

cisco certification books.1. Standard ACLsStandard ACLs identify packets based on their destination IP address. The use of such ACLs includes tunnel separation (for remote access VPN tunnel deployments) and route redistribution with route mapping (for dynamic routing protocols [e.g., OSPF, BGP] deployments, etc.). However, such ACLs cannot be applied to interfaces to perform traffic filtering functions. A standard ACL can be used only if the security device is running in routed mode. a Cisco ASA running in routed mode performs the function of routing packets as an additional Layer 3 device in the network when routing packets between subnets.2. Extended ACLsExtended ACLs (ACLs commonly used in the real world) can classify (match) packets based on the following attributes of the packet.Source and destination IP addresses. Layer 3 protocol.Source and/or destination TCP, UDP port.The type, code field value of the ICMP packet.Extended ACLs can be applied to interfaces to assist the security appliance with packet filtering, QoS packet classification, packet identification for NAT and VPN encryption, and many other functions. These ACLs can be configured on Cisco ASAs running in both routed and transparent modes. 3.EtherType ACLsOnce the EtherTypeACL is applied, the security device filters IP traffic and non-IP traffic based on the value of the Ethernet type field in the Layer 2 header. The Ethernet type field value is 0x0800 for IP traffic and 0x8137 or 0x8138 (varies with Netware version) for NovellIPX traffic.