IOS Access Control Lists

In this video demonstration, we show an example of writing IOS Access Control Lists (ACL's) on a home router. We use the revision control system (RCS) to maintain the master ACL file and push the ACL's to the router via TFTP. This is similar to many production networks, where maintaing comments and old revisions of ACL's is a requirement. We also show examples explaining the "don't care bit" format of IOS ACLs. Many network engineers mistakenly refer to the format as inverse-netmask, but that is incorrect. PIXes, FWSMs, and ASA's use a netmask format for ACLs. It is vitally important not to make the mistake of accidentally pushing a netmask format ACL line to an IOS device. That sort of error could result in an unplanned hole in your firewall and a serious security incident.

You can listen to IOS Access Control Lists online on Radio and Podcast. Open the player on this page to stream the available audio.

IOS Access Control Lists is an episode from Cisco Hands On Training Podcast by Darrell Root.

The episode duration depends on the source podcast feed and may not always be available.

This episode was published on Mar 24, 2009.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Cisco Hands On Training Podcast when more episodes are available from the podcast feed.