|
-
Man With Nothing To Lose
Access Lists
After finishing my Cisco Networking Academy course back in April, I have to say it is absolutely worthless. I'm going to need some independent study (I aced all 4 semesters of it with an A+ average, but I doubt I'll pass the CCNA anyway). Here's my question:
Which access list configuration allows only traffic from network 172.17.0.0 to enter interface serial 0?
A. Access-list 10 permit 172.17.0.0 0.0.255.255, int s0, ip access-group 10 out
B. Access-list 10 permit 172.17.0.0 0.0.255.255, int s0, ip access-group 10 in
C. Access-group 10 permit 172.17.0.0 0.0.255.255, int s0, ip access-list 10 out
D. Access-list 10 permit 172.17.0.0 0.0.255.255, int s0, ip access-list 10 in
I know choices C and D are wrong, but what about A or B? Since traffic any from 172.17.x.x IP is allowed in to the serial 0 interface, and there's an implicit deny all 0.0.0.0 255.255.255.255 for any other IPs to enter serial 0 am I correct to say choice B is the answer?
Thanks 
"If everything you try works, then you are not trying hard enough." - Gordon E. Moore
Desktop:
AMD Athlon XP [email protected] (11.0x210) | EPoX EP-8RDA+ | 512MB Crucial PC3200 | VisionTek GeForce4 Ti4600 | nVidia SoundStorm 5.1 | 160GB 7200RPM Western Digital | 48x/12x/48x Lite-On CD-RW | Lite-On 16x DVD-RW | 19" NEC AccuSync 90
Laptop:
Intel Pentium-M 1.4GHz ULV | 512MB Nanya PC2700 | ATi Mobility Radeon 9200 | 60GB 4200RPM Toshiba | 8x/16x/10x/24x Matshita DVD/CDRW | 12.1" Sony XGA TFT
SharkyExtreme 3DMark Team
-
Not Wurm
it could be either depending on where you place it.
B) Would be the choice if you were binding it TO the port which the packets in question would be going.
A) would be the choice if you were binding it FROM the port which the packets in question would be coming from.
Last edited by Isezumi; 07-14-2003 at 03:08 PM.
-
Man With Nothing To Lose
Originally posted by Isezumi
it could be either depending on where you place it.
B) Would be the choice if you were binding it TO the port which the packets in question would be going.
A) would be the choice if you were binding it FROM the port which the packets in question would be coming from.
I must have downloaded a badly designed study guide (It was just in a MS Word document). It didn't tell me there were more than 1 possible choice. During the CCNA testing the exam will tell you if there is more than 1 possible choice.
"If everything you try works, then you are not trying hard enough." - Gordon E. Moore
Desktop:
AMD Athlon XP [email protected] (11.0x210) | EPoX EP-8RDA+ | 512MB Crucial PC3200 | VisionTek GeForce4 Ti4600 | nVidia SoundStorm 5.1 | 160GB 7200RPM Western Digital | 48x/12x/48x Lite-On CD-RW | Lite-On 16x DVD-RW | 19" NEC AccuSync 90
Laptop:
Intel Pentium-M 1.4GHz ULV | 512MB Nanya PC2700 | ATi Mobility Radeon 9200 | 60GB 4200RPM Toshiba | 8x/16x/10x/24x Matshita DVD/CDRW | 12.1" Sony XGA TFT
SharkyExtreme 3DMark Team
-
Not Wurm
well for practicallity purposes there is only one answer and that is B.
However you can use Standard ACLs to trunk the crap out of an outgoing port, they are just generally alot more involved then just one arguement.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Reply With Quote
