Question

Difficulty: EasyFirewalls and Access Control Lists (ACLs)

A network administrator needs to implement a basic IPv4 Access Control List (ACL) to filter traffic entering a router interface. Place the following steps in the correct sequential order from first to last to properly configure and activate the firewall ACL.

  1. 1Enter global configuration mode on the network router.
  2. 2Define specific permit and deny statements within the numbered or named ACL.
  3. 3Navigate to the target router interface configuration mode.
  4. 4Bind the ACL to the interface specifying inbound or outbound direction.

Answer

The correct order for configuring and applying an ACL is: 1) Enter global configuration mode, 2) Define specific permit and deny statements within the ACL, 3) Navigate to the target router interface configuration mode, 4) Bind the ACL to the interface specifying inbound or outbound direction.
Configuring a network ACL requires entering global configuration mode first, defining the access list statements second, selecting the targeted interface third, and finally binding the ACL to the interface in the desired direction (inbound or outbound).

Step-by-Step Solution

1
Access router global configuration mode
Privileged access allows global system parameter modification.
ACL creation commands are executed from global configuration context.
2
Construct ACL rules
Access list rules are created in sequential top-down order.
Rules must exist prior to applying the access list to active interfaces.
3
Select interface
Interface configuration prompt is active.
ACLs must be attached directly to a specific physical or logical interface.
4
Apply ACL using ip access-group
Traffic passing through the interface is actively evaluated against the ACL rules.
An unattached ACL remains inactive and will not filter network traffic.

Key Concept

ACL Configuration Workflow
Rate this question