CCIE Practical Studies: Security (CCIE Self-Study)

Summary

This chapter has reviewed traffic filtering with ACLs. The ACL is a powerful tool that you can use in your pursuit of a secure network environment. The chapter began by examining the many different types of ACLs that are available, including the numbered and named IP ACLs that you can use on both the 3550 switch and an IOS software device, the lock-and-key and reflexive ACLs that you can use on IOS, and the router, port, and VLAN ACLs for use on the 3550 switch. The chapter covered the configuration of these ACLs and discussed how to associate them to an interface along with the VLAN mapping feature that is available on the 3550 switch. You looked at optional items such as logging of ACLs. The chapter concluded with a look at monitoring ...