Title: Chapter 9: Access Control Lists
Course: RITA MC - CISCO II > Section: Course Outline and Objectives

Overview, Objectives and Outline

Network security is a huge subject, and much of it is far beyond the scope of this course. However, one of the most important skills a network administrator needs is mastery of access control lists (ACLs).

Network designers use firewalls to protect networks from unauthorized use. Firewalls are hardware or software solutions that enforce network security policies. Consider a lock on a door to a room inside a building. The lock allows only authorized users with a key or access card to pass through the door. Similarly, a firewall filters unauthorized or potentially dangerous packets from entering the network. On a Cisco router, you can configure a simple firewall that provides basic traffic filtering capabilities using ACLs. Administrators use ACLs to stop traffic or permit only specified traffic on their networks.

An ACL is a sequential list of permit or deny statements that apply to addresses or upper-layer protocols. ACLs provide a powerful way to control traffic into and out of a network. ACLs can be configured for all routed network protocols.

The most important reason to configure ACLs is to provide security for a network. This chapter explains how to use standard and extended ACLs on a Cisco router as part of a security solution. Included are tips, considerations, recommendations, and general guidelines on how to use ACLs.

This chapter includes an opportunity to develop your mastery of ACLs with a series of lessons, activities, and lab exercises.

Learning Objectives for Chapter 9

- Explain how ACLs are used to filter traffic.
- Compare standard and extended IPv4 ACLs.
- Explain how ACLs use wildcard masks.
- Explain the guidelines for creating ACLs.
- Explain the guidelines for placement of ACLs.
- Configure standard IPv4 ACLs to filter traffic according to networking requirements.
- Modify a standard IPv4 ACL using sequence numbers.
- Configure a standard ACL to secure vty access.
- Explain the structure of an extended access control entry (ACE).
- Configure extended IPv4 ACLs to filter traffic according to networking requirements.
- Configure an ACL to limit debug output.
- Explain how a router processes packets when an ACL is applied.
- Troubleshoot common ACL errors using CLI commands.
- Compare IPv4 and IPv6 ACL creation.
- Configure IPv6 ACLs to filter traffic according to networking requirements.

Perform the following tasks in order to complete this chapter:

- Launch the Chapter 9 learning module
- Complete the Activities in the Learning Module
- Complete the Chapter 9.1 Quiz
- Complete the Chapter 9 Quiz
- Complete the Chapter 9 Exam

Click this link to go directly to Cisco Academy Course Modules (Links to an external site.)
(You will be required to login to Cisco Academy)