ccna 210-060 exam

ccna 210-060 exam.Named ACLs can also be created in place of numbered ACLo Named ACLs must specify whether they are standard or extended. Router(config)# ip access-list [standard| extended] name_of_ACL Executing this command will put the user into named ACL subconfiguration mode, where the permit and deny commands are entered. The permit and deny commands have the same syntax as in numbered IP ACLs.Standard named ACLs can use both deny and permit statements. Router(config-std-nacl)# deny {source [source-wildcard] \ any} Router(confiq-std-nacl)# permit {source Isource-wildcard] \ any}Extended named ACLs can also provide other parameters. Router(config-ext-nacl)# (permit | deny} protocol source-addr [source-wildcard] [operator operand] destination-addr [destination-mask] [ operator operand] [established]Once the ACL statement is created, the administrator can use the ipaccess-group command to specify the name of the ACL to activate the ACL on the interface. Router(config-if)# ipaccess-group access-list-name {in| out}ACLs can also be used to allow or deny virtual access to a specific IP address on a vty line. Standard ACLs allow restrictions to be imposed on the originating source IP address or range of IP addresses. Extended ACLs also allow for such functionality, but it can also impose access protocols on ports like port 23 (Telent) or port 22 (SSH).To apply an ACL to a vty line, you can use the access-class line configuration mode command. The access-class extended ACL supports only the any keyword as a destination. The access list must be applied to the vty port. Router(config-line)# access-class access-list-name {in | out}4.1.1.4 Logging ACL MatchesAt the end of an ACL statement, the administrator can configure the] og parameter.R1(config)# access-list 101 permit tcp 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255 eq 22 logIf this parameter is configured, when the CiscoIOS software compares the packet to the ACL, the router logs this information to any logging-enabled device if a match is found. A logging-enabled device can be the console, the router's internal cache, or a syslog server. The following information will be logged.