day 10 Flashcards
wild card mask
used to determine which bits in the IPV4 address used in access lists are significant
two wildcard mask optional terms:
host: represents 0.0.0.0 and represents that IP as the host
any: represents a wildcard mask of 255.255.255.255 and represents any IP
standard ACL
access-list {deny | permit} [source wildcard] [log]
if you use a deny entry, you probably need to include:
access-list permit any
extended ACL
access-list {deny | permit} [source-wildcard] [source-qualifier] [destination] [destination-wildcard] [destination-qualifiers] [log | log-input
show ip access-lists
displays the ACL’s in a slightly different format and provides some additional information
named ACL
an alternative to numbered IP ACL’s for both standard and extended access lists.
allows reference to an access list by name.
the name must begin with a letter and cannot contain spaces
syntax
ip access-list {standard | extended} name
editing ACL’s
when using show ip access lists, you see that each ACL line begins with a number. you can edit a specific line by preceding the new line with the appropriate line number.
to replace a line
(config-ext-nacl)#