E-Lab 11.2.3a - Named ACL
Configure a named access-control list for the local router Ouagadougou.
Use the established keyword to maximize client system security.
It will allow host clients to receive traffic only from sources that were sent a TCP request.
Step 1
Activate privileged EXEC mode.
Step 2
Enter global configuration mode.
Step 3
Create a named extended access-list with name myacl.
Step 4
Add an entry to the list that specifies that TCP traffic from any external source to a host on the 192.168.12.0/24 subnet must be initiated by an internal host.
Do not use the any keyword.
Step 5
Exit to the global configuration mode.
Step 6
Now enter interface configuration mode for Serial 0 to apply the access list.
Step 7
Apply access-list myacl to the serial interface such that filtering occurs on inbound traffic.
Step 8
Type end to exit the configuration session.
Step 9
Type show access-lists to view the access list that was created.
Step 10
View the ip interface information for serial 0 to verify that the list is being applied.