CCNA Certification/Security

From Wikibooks, open books for an open world
Jump to navigation Jump to search
 CCNA Certification 

AcknowledgementsIntroductionThe OSI ModelApplication LayerTransport LayerNetwork LayerAddressingRouting ProtocolsData Link LayerSwitchingPhysical LayerRouter OperationAdvanced Addressing TopicsAdvanced Routing TopicsAdvanced Switching TopicsSecurityWANConfigurationConclusionReferencesAbout the ExamCisco Router CommandsQuick Reference Sheet

Security[edit | edit source]

Managing IP traffic with Access Lists[edit | edit source]

Access list (ACL) is a sequence of rules that inform the cisco router which network packets it should block and which it should route normally. By itself, an ACL has no effect on the routing process. In order to take effect, one should apply the ACL to one or more interfaces on the router. Moreover, one should specify whether the rule is applies to incoming or outgoing network traffic.

IPv4 Standard ACLs[edit | edit source]

Standard ACLs filter IP packets based on their destination only.The access-list command syntax is:

Router(config)# access-list {1-99} {permit | deny} source-addr [source-mask]

IPv4 Extended ACLs[edit | edit source]

Extended ACLs can filter packets based on protocol type, source and destination addresses, and port numbers.

IPv6 ACLs[edit | edit source]

  • One can only assign names to IPv6 ACLs (not numbers).
  • Compared to IPv4 standard & extended ACLs, there is only one type of IPv6 ACLs.
  • One should use the command traffic-filter (instead of access-group in IPv4).

References[edit | edit source]