Objectives of this Lab:
The goal of this lab is to become familiar with the configuration of Access Control Lists (ACLs)
in Packet Tracer.
Instructions:
• Read carefully before starting the lab.
• These exercises are to be done individually.
• You are supposed to provide the answers to the questions listed at the end of this document
and upload the completed report to the Moodle.
• Avoid plagiarism by copying from the Internet or from your peers. Your submitted work
should be written by yourself.
• Deadline for submission on Moodle is by 5pm Friday 22nd May, 2020. You must submit a
word document that provides answers to the questions given at the end.
• This lab carried 2.5% weightage.
Access control lists:
In order to filter network traffic, ACLs control whether routed packets are forwarded or blocked
at the router interface. Your router examines each packet in order to determine whether to
forward or drop the packet based on the criteria that you specify within the ACL.
ACL criteria include:
• Source address of the traffic
• Destination address of the traffic
• Upper-layer protocol
Complete these steps in order to construct an ACL as the examples in this document show:
1. Create an ACL.
2. Apply the ACL to an interface.
The IP ACL is a sequential collection of permit and deny conditions that apply to an IP packet.
The router tests packets against the conditions in the ACL one at a time.
The first match determines whether the Cisco IOS Software accepts or rejects the packet.
Because the Cisco IOS Software stops testing conditions after the first match, the order of the
conditions is critical. If no conditions match, the router rejects the packet because of an implicit
deny all clause.