Question

7. In order to improve the network performance and security, ACLs is recommended. Please explain what is the ACL ?

8. How can ACLs help with the required tasks?

9. What are the principles of applying ACLs?

10. How to block VLAN 10 to visit ISP? Please write down the ACL statement(s) accordingly

Answer 1

What is Acl?

Solution:

ACL(Access control lists) these are used by routers and some switches to restrict and permit data flow in and out of the network .If an acl is configured in the network interface, network device analyses the data flowing in and out with the criteria defined by the acl it either permits or restricts the data flow.

How can ACLs help with the required tasks

Solution:

1.It will provide control over traffic by permitting or denying the based on the need of the network

2. network performance is improved.

3.Provides security by denying unwanted data entering into the network, Allows the administrator to configure the access  list according to the needs.

What are the principles of applying ACLs

Solution:

1.The standard Access-list is for the most part connected near the destination (yet not always).

2.The extended Access-list is by and large connected near the source (however not always).

3.We can assign only one inbound and outbound access control list (ACL) per network interface.

4.If we are using an numbered access list we cant remove an specific rule if we try to remove one entire rule set will be removed. If we are using an name based access list then we can remove specific rule.

5.Every new rule included will be placed at the bottom of the access list so we need to carefully understand the scenario.

6.Name of the standard and extended access list cant be same.

How to block VLAN 10 to visit ISP? Please write down the ACL statement(s) accordingly

solution:

IP access list VLAN_10

10 deny ip "blocking ip address"

this statements makes vlan 10 not to communicate with the other ip specifed