764 Appendix A: Answers to the "Do I Know This Already?" Quizzes and Q&A Sections
26
Name all the items that a named extended IPX access list can examine to make a match.
·
Protocol
·
Source socket
·
Source network
·
Source IPX address (network and node)
·
Subset of entire address (using mask)
·
Destination socket
·
Destination network
·
Destination IPX address (network and node)
·
Subset of entire IPX address (using mask)
The same matching criteria are used for numbered extended IPX access lists as are used
for named extended IPX access lists.
27
Name all the items that a named standard IP access list can examine to make a match.
·
Source IP address
·
Subset of entire source address (using mask)
Named standard IP access lists match the same items that numbered IP access lists match.
28
Configure a SAP numbered access list so that SAPs 4 through 7 are matched in network
BEEF with a single command.
You cannot match more than one SAP with a single access list statement. To match four
separate SAP values, four separate access list statements are required.
29
Configure a named IP access list that would stop packets from subnet 134.141.7.0,
255.255.255.0, from exiting serial 0 on some router. Allow all other packets.
ip access-list standard fred
deny 134.141.7.0 0.0.0.255
permit any
!
interface serial 0
ip access-group fred
The first access list statement denies packets from that subnet. The other statement is
needed because the default action to deny packets is not explicitly matched in an access
list statement.
apA.fm Page 764 Monday, March 20, 2000 5:24 PM