ccna 3 notes pdf

ccna 3 notes pdf.Step 3 After the user authenticates successfully. the Cisco 10S adds a dynamic ACLo administrator that allows the user to access the configured internal resources. it is not possible to create an access policy for each user. instead. a policy is defined for all dynamic ACL users. this policy is applied to all authenticated users.Step 4 Users can access those internal resources. If there is no dynamic ACL entry, access to those internal resources is denied.4.L5.3 Steps for Configuring Dynamic ACLsThe following are a few basic steps to establish a dynamic ACL.Step 1 Create an extended ACL. dynamic ACLs support numbered and named extended ACLo The first entry in the ACL has to allow Telnet or SSH access to IP addresses that are available to external users on the router. Or at least a placeholder entry must be created in the ACL. the user's successful authentication is required to create the dynamic entry.Step 2 Define authentication. Dynamic ACLs support the following authentication methods: local (username database), external AAA server, and linepassword. o Typically, linepassword is rarely used because all users must use the same password. Step 3 Enable the dynamic authentication method. This process occurs on the router's vty line. When enabled, the router creates a dynamic ACL entry on the interface ACL that has a dynamic ACL reference. The command to create a dynamic ACL entry is as follows.Router(config)# access-list ( acl-#} dynamic dynamic_ACL_name [ timeout minutes ](permit|deny} protocol source-addr [ source-wildcard ] [ operator operand ] destination-addr4.1 Access Control Lists 93[ destination-wildcard ] [ operator operand ] [ established ]The dynamic keyword allows the administrator to specify the name of the dynamic ACL to be used, which must be unique among all named ACLs of the router. The timeout parameter is optional and specifies the absolute timeout for dynamic entries created by authenticated users, which is in the range of 1.9999 minutes.