CO3513 Revision

Explain this sample ACL.

• This ACL denies traffic from the host with IP address 192.168.1.10 and permits all other traffic. It is then applied to the ingress interface of FastEthernet0/0.

• This ACL denies traffic from the host with IP address 192.168.1.10 and permits all other traffic. It is then applied to the egress interface of FastEthernet0/0.

• This ACL allows traffic to the host with IP address 192.168.1.10 and permits all other traffic. It is then applied to the ingress interface of FastEthernet0/0.

• This ACL denies traffic from the host with IP address 192.168.1.10 and denies all other traffic. It is then applied to the ingress interface of FastEthernet0/0.

Answer explanation

In this example, we create a standard ACL on Router1 to block traffic from the source IP address 192.168.1.10.

This ACL denies traffic from the host with IP address 192.168.1.10 and permits all other traffic. It is then applied to the ingress interface of FastEthernet0/0.

Explain this sample ACL.

• This ACL permits only traffic from the source IP address 192.168.1.10 and port TCP 80 to the destination IP address 192.168.2.10 and port TCP 443. It is applied to the ingress interface of FastEthernet0/0.

• This ACL permits only traffic from the source IP address 192.168.1.10 and port TCP 80 to the destination IP address 192.168.2.10 and port TCP 443. It is applied to the egress interface of FastEthernet0/0.

• This ACL permits only traffic to the source IP address 192.168.1.10 and port TCP 80 to the destination IP address 192.168.2.10 and port TCP 443. It is applied to the ingress interface of FastEthernet0/0.

• This ACL permits only traffic from the source IP address 192.168.1.10 and port TCP 443 to the destination IP address 192.168.2.10 and port TCP 80. It is applied to the ingress interface of FastEthernet0/0.

Answer explanation

In this example, we create an extended ACL on Router2 to allow traffic from a specific source IP address (192.168.1.10) and port (TCP port 80) to a specific destination IP address (192.168.2.10) and port (TCP port 443)

This ACL permits only traffic from the source IP address 192.168.1.10 and port TCP 80 to the destination IP address 192.168.2.10 and port TCP 443. It is then applied to the ingress interface of FastEthernet0/0.

Explain this sample ACL.

• This ACL denies ICMP traffic from any source to any destination. It is then applied to the ingress interface of FastEthernet0/0.

• This ACL permits only ICMP traffic from any source to any destination. It is then applied to the ingress interface of FastEthernet0/0.

• This ACL permits only ICMP traffic from any source to any destination. It is then applied to the egress interface of FastEthernet0/0.

• This ACL permits any traffic from any source to any destination. It is then applied to the ingress interface of FastEthernet0/0.

Answer explanation

In this example, we create a named ACL on Router3 to allow ICMP traffic from any source to any destination.

This ACL permits only ICMP traffic from any source to any destination. It is then applied to the ingress interface of FastEthernet0/0.

Explain this sample ACL.

• This ACL denies SSH traffic to the router from any source. It is then applied to the virtual terminal lines on the router.

• This ACL permits only SSH traffic to the router from any source. It is then applied to the virtual terminal lines on the router.

• This ACL permits only SSH traffic to the router from the same network only. It is then applied to the virtual terminal lines on the router.

• This ACL permits only SSH traffic to the router from any source.

Answer explanation

This ACL permits only SSH traffic to the router from any source. It is then applied to the virtual terminal lines on the router.

Which of these is NOT a valid reason to have VLANs in your organisation?

• Data Confidentiality

• Data Integrity

• Scalability

• Simplicity

Answer explanation

Data Confidentiality: When data is transmitted over the Internet, it can be intercepted by malicious actors.

Data Integrity: VPNs ensure the integrity of the data being transmitted by protecting it from unauthorized modification

Scalability: VPNs are easily scalable, meaning that businesses can add or remove users as needed without significant infrastructure changes.

VLANs require additional configuration and management, which can increase network complexity.

Based on this network diagram, we would issue the following commands to create the VLAN 20.

​ (a)   and ​ (b)  

• (config) vlan 20
• (config-vlan) name VLAN20
• (config) vlan named 20
• (config-vlan) VLAN20
• (config-vlan) config VLAN10
• (config) vlan int 20

Answer explanation

(config) vlan 10

(config-vlan) name vlan10

What does the following command do:

ipv6 unicast-routing  

• Enables the device to route IPv6 traffic between different subnets or VLANs on the network.

• Disables IPv6 routing between different subnets or VLANs on the network.

• Prevents other networks seeing your ipv6 network.

• Enables the device to route IPv6 traffic on only the same subnets or VLAN.

Answer explanation

Without this command, the device will not be able to forward IPv6 traffic, even if it has IPv6 addresses configured on its interfaces.

in the ipv6 address 2001:abab:872a:10::ab12/64.

The first 4 blocks (2001, abab, 872a, 10) represent the ​ (a)  

The "::" (double colon) represents a series of ​ (b)   zeros

The last block (ab12) represents the ​ (c)  

The "/64" at the end of the IPv6 address is the​ (d)  

• network prefix
• consecutive
• interface ID
• subnet mask

Answer explanation

The first 4 blocks (2001, abab, 872a, 10) represent the network prefix, which identifies the network portion of the IPv6 address.

The "::" (double colon) represents a series of consecutive zeros within the network prefix.

The last block (ab12) represents the interface ID, which identifies the specific interface on the network.

The "/64" at the end of the IPv6 address is the subnet mask or prefix length, which indicates the number of bits that are used for the network prefix.

What is the compressed address of ipv6 fd73:0001:0001:0020:0000:0000:0000:0001

Uncompress the IPv6 address fd72:a23b:17cd::1a:1a:1

• fd72:a23b:17cd:0000:0000:001a:001a:0001 /64

• fd72:a23b:17cd:0000:0000:001a:001a:0001 /32

• fd72:a23b:17cd:0000:0000:0000:0000:0001 /64

• fd72:a23b:17cd:0000:0000:0000:0000:0000 /64