Novell traffic. You learned the difference between a standard and
extended IPX access list and how to apply the lists to a Cisco router.
router. We went over some basic monitoring commands to verify and
test IP and IPX access lists.
The numbered range you can use to configure a standard IP access list is
199. The numbered range for an extended IP access list is 100199.
an implicit deny. What this means is that if a packet does not match any
of the lines in the access list, then it will be discarded. Also, if you have
nothing but denys in your list, then the list will pass no packets.
configure a standard IP access list, use the access-list numbers 199 in glo-
bal configuration mode. Choose permit or deny, then choose the source
IP address you want to filter on.
configure an extended IP access list, use the access-list numbers 100199
in global configuration mode. Choose permit or deny, the Network layer
protocol, the source IP address you want to filter on, the destination
address you want to filer on, and finally the Transport layer protocol.
whether an access list is set on an interface and in which direction it is
filtering, use the show ip interface command.
see the configured access lists on your router, use the show access-list
command. This command will not show you which interfaces have an
access list set.