predefined policies and roles

Question 1

What policies are used in ip access-list session allowall

Answer 1

any any any permit

Question 2

What policies are used in access-list session control

Answer 2

user any udp 68 deny
any any svc-icmp permit
any any svc-dns permit
any any svc-papi permit
any any svc-cfgm-tcp permit
any any svc-tftp permit
any any svc-dhcp permit
any any svc-natt permit

Question 3

What policies are used in access-list session captiveportal

Answer 3

user alias mswitch svc-https dst-nat 8081
user any svc-http dst-nat 8080
user any svc-https dst-nat 8081
user any svc-http-proxy1 dst-nat 3182
user any svc-http-proxy2 dst-nat 8080
user any svc-http-proxy3 dst-nat 8088

Question 4

What policies are used in access-list session cplogout

Answer 4

user alias mswitch svc-https dst-nat 8081

Question 5

What policies are used in access-list session vpnlogon

Answer 5

any any svc-ike permit
any any svc-esp permit
any any svc-l2tp permit
any any svc-pptp permit
any any svc-gre permit

Question 6

What policies are used in access-list session ap-acl

Answer 6

any any udp 5000
any any udp 5555
any any svc-gre permit
any any svc-syslog permit
any user svc-snmp permit
user any svc-snmp-trap permit
user any svc-ntp permit

Question 7

What policies are used in access-list session validuser

Answer 7

any any any permit

Question 8

What policies are used in access-list session vocera-acl

Answer 8

any any svc-vocera permit queue high

Question 9

What policies are used in access-list session icmp-acl

Answer 9

any any svc-icmp permit

Question 10

What policies are used in access-list session sWhat policies are used in -acl

Answer 10

any any svc-sip-udp permit queue high

any any svc-sip-tcp permit queue high

Question 11

What policies are used in access-list session https-acl

Answer 11

any any svc-https permit

Question 12

What policies are used in access-list session dns-acl

Answer 12

any any svc-dns permit

Question 13

What policies are used in access-list session logon-control

Answer 13

user any udp 68 deny
any any svc-icmp permit
any any svc-dns permit
any any svc-dhcp permit
any any svc-natt permit

Question 14

What policies are used in access-list session srcnat

Answer 14

user any any src-nat

Question 15

What policies are used in access-list session skinny-acl

Answer 15

any any svc-sccp permit queue high

Question 16

What policies are used in access-list session tftp-acl

Answer 16

any any svc-tftp permit

Question 17

What policies are used in access-list session dhcp-acl

Answer 17

any any svc-dhcp permit

Question 18

What policies are used in access-list session http-acl

Answer 18

any any svc-http permit

Question 19

What policies are used in access-list session svp-acl

Answer 19

any any svc-svp permit queue high

user host 224.0.1.116 any permit

Question 20

What policies are used in access-list session noe-acl

Answer 20

any any svc-noe permit queue high

Question 21

What policies are used in access-list session h323-acl

Answer 21

any any svc-h323-tcp permit queue high

any any svc-h323-udp permit queue high

Question 22

What is the ip access-list session allowall

Answer 22

permits all traffic

Question 23

What is the ip access-list session control

Answer 23

Controls traffic

Question 24

What is the ip access-list session captiveportal

Answer 24

Enables captive Portal authentication

Question 25

What is the ip access-list session cplogout

Answer 25

Enables Captive portal log-out window

Question 26

What is the ip access-list session vpnlogon

Answer 26

permits vpn sessions

Question 27

What is the ip access-list session ap-acl used for

Answer 27

permits aps to communicate with the controller - internal use - no modify

Question 28

What is the ip access-list session validuser used for

Answer 28

use to restrict foreign ip address from being added to user table. Not applied to any user role - internal system policy

Question 29

What is the ip access-list session vocera-acl used for

Answer 29

automatically permit and prioritize Vocera traffic.

Question 30

What is the ip access-list session icmp-acl used for

Answer 30

permits all icmp traffic

Question 31

What is the ip access-list session sWhat is the ip-acl used for

Answer 31

automatically permit and prioritize all SIP control and data traffic.

Question 32

What is the ip access-list session https-acl used for

Answer 32

permits https traffic

Question 33

What is the ip access-list session dns-acl used for

Answer 33

permits dns traffic

Question 34

What is the ip access-list session logon-control used for

Answer 34

pre-authentication role to be used by all wireless clients. Prohibits clients from acting as dhcp server

Question 35

What is the ip access-list session srcnat used for

Answer 35

used to source-nat all traffic

Question 36

What is the ip access-list session skinny-acl used for

Answer 36

automatically permit and prioritize Cisco skinny SCCP VoIP traffic

Question 37

What is the ip access-list session tftp-acl used for

Answer 37

permits all tftp traffic

Question 38

What is the ip access-list session dhcp-acl used for

Answer 38

Permits all DHCP traffic

Question 39

What is the ip access-list session http-acl used for

Answer 39

Permits all HTTP traffic.

Question 40

What is the ip access-list session svp-acl used for

Answer 40

automatically permit and prioritize Spectralink Voice Protocol

Question 41

What is the ip access-list session noe-acl used for

Answer 41

automatically permit and prioritize NOE traffic

Question 42

What is the ip access-list session h323-acl used for

Answer 42

automatically permit and prioritize H.323 traffic

Question 43

What policies are used in user-role default-vpn-role

Answer 43

session-acl allowall

Question 44

What policies are used in the user-role voice

Answer 44

``` session-acl sip-acl session-acl noe-acl session-acl svp-acl session-acl vocera-acl session-acl skinny-acl session-acl h323-acl session-acl dhcp-acl session-acl tftp-acl session-acl dns-acl ```

Question 45

What policies are used in the user-role guest

Answer 45

``` session-acl http-acl session-acl https-acl session-acl dhcp-acl session-acl icmp-acl session-acl dns-acl ```

Question 46

What policies are used in the user-role guest-logon

Answer 46

captive-portal default session-acl logon-control session-acl captiveportal

Question 47

What policies are used in the user-role -guest-logon

Answer 47

captive-portal default session-acl logon-control session-acl captiveportal

Question 48

What policies are used in the user-role authenticated

Answer 48

session-acl allowall

Question 49

What policies are used in the user-role logon

Answer 49

session-acl logon-control session-acl captiveportal session-acl vpnlogon

Question 50

What policies are used in the user-role -logon

Answer 50

session-acl control session-acl captiveportal session-acl vpnlogon

Question 51

What policies are used in the user-role default-vpn-role

Answer 51

This is the default role used for VPN-connected clients. It is referenced in the default "aaa authentication vpn" profile.

Question 52

What policies are used in the user-role voice

Answer 52

This role can be applied to voice devices in order to automatically permit and prioritize all VoIP protocols.

Question 53

What policies are used in the user-role guest

Answer 53

This is a default role for guest users. | It permits only HTTP, HTTPS, DHCP, ICMP, and DNS for the guest user

Question 54

What policies are used in the user-role guest-logon

Answer 54

This role is used as the pre-authentication role for guest SSIDs. It allows control traffic such as DNS, DHCP, and ICMP, and also enables captive portal

Question 55

What policies are used in the user-role ssid-guest-logon

Answer 55

Role is only generated when creating a new WLAN using the WLAN Wizard Auto Created when captive portal is enabled

Question 56

What policies are used in the user-role authenticated

Answer 56

This is a default role that can be used for authenticated users

Question 57

What policies are used in the user-role logon

Answer 57

This is a system role that is normally applied to a user prior to authentication. This applies to wired users and non-802.1x wireless users.

Question 58

What policies are used in the user-role ssid-logon

Answer 58

The role allows certain control protocols such as DNS, DHCP, and ICMP, and also enables captive portal and VPN termination/pass through. The logon role should be edited to provide only the required services to a pre-authenticated user

Question 59

What policies are used in the user-role ssid-captiveportal-profile

Answer 59

WLAN Wizard and you do not have a PEF NG This implicit user role allows only DNS and DHCP traffic between the client and network and directs all HTTP or HTTPS requests to the captive portal. You cannot directly modify the implicit user role or its rules