Access and NAT Flashcards

1
Q

When does a packet stop within an access list?

A

first match

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What rule is at the bottom of every ACL?

A

implicit deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the different types of ACLs?

A

standard, extended, reflexive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Standard ACLs make matches based on what criteria?

A

source address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What kind of lists are Access Control lists?

A

list of permit and deny statements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Extended ACLs make matches based on what criteria?

A

source/destination address, protocol, source/destination port number

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What command will allow you to use Named ACLs?

A

ip access-list

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Standard access lists can only permit or deny based on the source address. True or false?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the wildcard mask of 192.168.1.0?

A

0.0.0.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the wildcard mask of 10.1.1.1?

A

0.0.0.0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does permit 0.0.0.0 255.255.255.255 do within an ACL?

A

permit any

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does a sequence number do for the access list?

A

dictate order of statements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What command is used to access an ACL?

A

ip access-list standard ‘name’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What would the command “ip access-list standard INTERNETFILTER” do?

A

enter configuration for the standard access list named INTERNETFILTER

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What would the command “15 deny host 10.1.1.5” do?

A

deny host 10.1.1.5 with a sequence number of 15

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What command would be used to allow the ip address of 192.168.1.0?

A

permit 192.168.1.0 0.0.0.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What command is used to apply an access list?

A

ip access-group ‘ACL name’ inbound/outbound

18
Q

What is the subnet mask of 192.168.2.0 /25?

A

255.255.255.128

19
Q

What is the wildcard mask of subnet 255.255.255.128?

A

255.255.255.127

20
Q

What is the wildcard mask of subnet 255.255.255.32?

A

255.255.255.223

21
Q

After you have created the ACL on the router, what should you do next if you are using the ACL for security filtering?

A

Apply it to the corresponding interface

22
Q

When you are applying a standard ACL for security, you should apply it as close to the _____ as possible.

A

destination

23
Q

What steps would be taken to configure the ACL “FILTER_TELNET” to a vty line for inbound?

A
line vty 0 4
access-class FILTER_TELNET in
24
Q

What command can be used to show access lists?

A

show run

25
Q

Port Address Translation allows you to Overload a single ______ IP address.

A

public

26
Q

How many ports does PAT allow?

A

Up to 65,536

27
Q

What is static NAT usually used for?

A

inbound traffic, incoming requests

28
Q

What is dynamic NAT usually used for?

A

NAT pools for large enterprises

29
Q

What is the command for excluding IP addresses from a DHCP scope?

A

ip dhcp excluded-address x.x.x.x y.y.y.y

30
Q

What must be configured in order to set up NAT?

A

ACL

31
Q

What command would be used to setup an ACL named NAT_ADDRESSES?

A

ip access-list standard NAT-ADDRESSES

32
Q

What two addresses must be configured on a router for NAT?

A

inside address, outside address

33
Q

What is the command to set an interface as the inside address for NAT?

A

ip nat inside

34
Q

A router has two interfaces, FastEthernet 0/0 and FastEthernet 0/1. What steps would you take to configure 0/0 as the inside NAT and 0/1 as the outside NAT?

A
config t
int fa0/0
ip nat inside
exit
ip fa0/1
ip nat outside
35
Q

What does ”inside local” represent on “show ip nat translations” command?

A

device originating request

36
Q

What command can be used to view NAT translations?

A

show ip nat translations

37
Q

When creating a NAT pool, what command would you use to create a pool named NAT_POOL?

A

ip nat pool NAT_POOL x.x.x.x y.y.y.y

38
Q

What command must be done to a NAT source list in order for multiple hosts to use the NAT?

A

overload

39
Q

When creating a NAT inside, what command is typically used in every instance?

A

ip nat inside source _____

list, static

40
Q

To configure static NAT to translate traffic from inside the local network to outside the local network, which of the following should be used?

A

ip nat inside source static x.x.x.x(inside) y.y.y.y(outside)

41
Q

What is the show command for current translations?

A

show ip nat translations