Term
| 1) waht command would you to to configure a standard IP access list to prevent all machines on network 172.16.0.0/16 from accessing your enthernet network? |
|
Definition
1) access-list 10 deny 172.16.0.0 0.0.255.255
access-list 10 permit any |
|
|
Term
| 2) what command would you use to apply the access list you created in question 1 to an ethernet interface out? |
|
Definition
| 2) ip access-group 10 out |
|
|
Term
| 3) what command would you use to creat an access list that deies host 192.168.15.5 access to an ethernet network? |
|
Definition
3) access-list 10 deny host 192.168.15.5
access-list 10 permit any |
|
|
Term
| 4) which command verifies that you've entered the access list correctly? |
|
Definition
|
|
Term
| 5) what two tools can help notify and prevent DoS attacks? |
|
Definition
|
|
Term
| 6) what command would you to create an extended access list that stops host 172.16.10.1 from telnetting to host 172.16.30.5? |
|
Definition
6) access-list 110 deny tcp host
172.16.10.1 host 172.16.30.5 eq 23
access-list 110 permit ip any any |
|
|
Term
| 7) what command would you use to set an access list on a VTY line? |
|
Definition
7) line vty o 4
access-class 110 in |
|
|
Term
| 8) from quetion 1, write the same standrad ip access list you wrote in question 1 but this time as a named access list. |
|
Definition
| 8) ip access-list standard no172net deny 172.16.0.0. 0.0.255.255 permit any |
|
|
Term
| 9) from queston 8, writethe command to apply the named access list you created to an ethernet interface out. |
|
Definition
| 9)ip access-group No172net out permit any |
|
|
Term
| 10) which command verifies the placement and direction of an access list? |
|
Definition
|
|
