思科认证 module7[优质文档].pptVIP

Slide 3 of 3 Purpose: Emphasize: Shows a deny result of the access list test. Now the packet is discarded into the packet discard bucket. The unwanted packet has been denied access to the outbound interface. The Notify Sender message shows a process like ICMP, returning an “administratively prohibited” message back to the sender. Slide 1 of 4 Purpose: Emphasize: This graphic explains in more detail the processes access list statements perform. Use the graphic’s diamond expanded from an earlier page to show individual access list statements. Shows packets coming into the large diamond. It represents an expanded graphical view from the previous page. Inside, smaller diamonds represent access list statements. They occur in sequential, logical order. Tell students the graphic represents a single access list. There can be only one access list per protocol per per direction per interface. Slide 2 of 4 Purpose: Emphasize: Adds the next test diamond. Slide 3 of 4 Purpose: Emphasize: Adds the third diamond as the next test. Discuss the logical, ordered testing of packet conditions. One recommendation for the sequence of access list statements begins with the most specific of conditions to match at the beginning of the list; then continue with matches involving a larger group, such as entire subnets or networks. Finish with statements matching still larger groups. Slide 4 of 4 Purpose: Emphasize: Shows the implicit “deny all.” Describe the final access list test to match any packets not covered by earlier access list statements. All remaining packets match the “Implicit Deny” and are discarded into the bit bucket. Slide 1 of 1 Purpose: Emphasize: Slide 1 of 2 Purpose: Emphasize: This graphic give your students a simplified perspective on how to use the two generalized commands in an access list process. Layer 1—Shows the general form of the global access list command. This declares the number of the list (which indicates the protocol and ty