A network technician configures a standard IPv4 access control list on a Cisco router using the command `access-list 5 permit host 172.16.10.15` and applies it inbound on an interface. What happens when host 172.16.10.20 sends traffic into that interface?
- The traffic is dropped because of the implicit deny clause at the end of the access control list.Cevap
- BThe traffic is permitted because it originates from the same IP subnet as the permitted host.
- CThe traffic is permitted by default until an explicit deny statement is added to the configuration.
- DThe traffic is forwarded because standard access lists only drop traffic when configured with specific deny statements.
Cevap
The traffic is dropped because of the implicit deny clause at the end of the access control list.
Every Cisco IPv4 access control list automatically ends with an implicit deny statement (such as `deny any`). When host 172.16.10.20 sends packets into the interface, the router evaluates the packet against the explicit rule permitting host 172.16.10.15. Because the source address does not match, processing reaches the end of the list where the implicit deny drops the packet.
Adım Adım Çözüm
Anahtar Kavram
ACL Implicit Deny Clause