Home > CCNA Access List Sim 2

CCNA Access List Sim 2

February 15th, 2012 Go to comments

Question

A network associate is adding security to the configuration of the Corp1 router. The user on host C should be able to use a web browser to access financial information from the Finance Web Server. No other hosts from the LAN nor the Core should be able to use a web browser to access this server. Since there are multiple resources for the corporation at this location including other resources on the Finance Web Server, all other traffic should be allowed.

The task is to create and apply a numberd access-list with no more than three statements that will allow ONLY host C web access to the Finance Web Server. No other hosts will have web access to the Finance Web Server. All other traffic is permitted.
Access to the router CLI can be gained by clicking on the appropriate host.

All passwords have been temporarily set to “cisco”.
The Core connection uses an IP address of 198.18.196.65
The computers in the Hosts LAN have been assigned addresses of 192.168.33.1 – 192.168.33.254
Host A 192.168.33.1
Host B 192.168.33.2
Host C 192.168.33.3
Host D 192.168.33.4
The servers in the Server LAN have been assigned addresses of 172.22.242.17 – 172.22.242.30
The Finance Web Server is assigned an IP address of 172.22.242.23.
The Public Web Server is assigned an IP address of 172.22.242.17

access_list_sim2.jpg

Answer and Explanation

(Note: If you are not sure how to use access-list, please check out my access-list tutorial at: http://www.9tut.com/access-list-tutorial, also some modifications about the access-list have been reported so you should read the “Some modifications” section at the end of this question to understand more. You can also download this sim to practice (open with Packet Tracer) here: http://www.9tut.com/download/9tut.com_Access-list_sim2.pkt

Corp1>enable (you may enter “cisco” as it passwords here)

We should create an access-list and apply it to the interface which is connected to the Server LAN because it can filter out traffic from both Sw-2 and Core networks. The Server LAN network has been assigned addresses of 172.22.242.17 – 172.22.242.30 so we can guess the interface connected to them has an IP address of 172.22.242.30 (.30 is the number shown in the figure). Use the “show running-config” command to check which interface has the IP address of 172.22.242.30.

Corp1#show running-config

access_list_sim_show_running.jpg

We learn that interface FastEthernet0/1 is the interface connected to Server LAN network. It is the interface we will apply our access-list (for outbound direction).

Corp1#configure terminal

Our access-list needs to allow host C – 192.168.33.3 to the Finance Web Server 172.22.242.23 via web (port 80)

Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80

Deny other hosts access to the Finance Web Server via web

Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80

All other traffic is permitted

Corp1(config)#access-list 100 permit ip any any

Apply this access-list to Fa0/1 interface (outbound direction)

Corp1(config)#interface fa0/1
Corp1(config-if)#ip access-group 100 out

Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from both the LAN and the Core networks. If we apply access list to the inbound interface we can only filter traffic from the LAN network.

In the real exam, just click on host C and open its web browser. In the address box type http://172.22.242.23 to check if you are allowed to access Finance Web Server or not. If your configuration is correct then you can access it.

Click on other hosts (A, B and D) and check to make sure you can’t access Finance Web Server from these hosts.

Finally, save the configuration

Corp1(config-if)#end
Corp1#copy running-config startup-config

(This configuration only prevents hosts from accessing Finance Web Server via web but if this server supports other traffic – like FTP, SMTP… then other hosts can access it, too.)

Notice: In the real exam, you might be asked to allow other host (A, B or D) to access the Finance Web Server so please read the requirement carefully.

Some modifications:

permit host B from accessing finance server access-list 100 permit ip host 192.168.33.2 host 172.22.242.23
deny host B from accessing the OTHER server (not the whole network) access-list 100 deny ip host 192.168.33.2 172.22.242.16 0.0.0.15
permit everything else permit ip any any
Only allow Host C to to access the financial server access-list 100 permit ip host 192.168.33.3 host 172.22.242.23
Not allow anyone else in any way communicate with the financial server access-list 100 deny ip any host 172.22.242.23
Allow all other traffic permit ip any any
- Host C should be able to use a web browser(HTTP)to access the Finance Web Server access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80
- Other types of access from host C to the Finance Web Server should be blocked
– All access from hosts in the Core or local LAN to the Finance Web Server should be blocked
access-list 100 deny ip any host 172.22.242.23
(because the requirement says we can not use more than 3 statements so we have to use “any” here for the hosts in the Core and hosts in local LAN)
- All hosts in the Core and local LAN should be able to access the Public Web Server * access-list 100 permit ip any host <IP of Public Web Server>
(If the question asks this, surely it has to give you the IP of Public Web Server) but in the exam you should use “access-list 100 permit ip any any”
Host C should be able to use a web browser to access the financial web server access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80
Other types of access from host C to the finance web server should be blocked access-list 100 deny ip host 192.168.33.3 host 172.22.242.23
All hosts in the core and on the local LAN should be able to access the Public web server * access-list 100 permit ip any host <IP of Public Web Server>
(The IP of Public Web Server will surely be given in this question) but in the exam you should use “access-list 100 permit ip any any”

* There are some reports about the command of “All hosts in the core and on the local LAN should be able to access the Public web server” saying that the correct command should be “access-list 100 permit ip any any”, not “access-list 100 permit ip any host (IP of Public Web Server)”. Although I believe the second command is better but maybe you should use the first command “access-list 100 permit ip any any” instead as some reports said they got 100% when using this command (even if the question gives you the IP address of Public Web Server). It is a bug in this sim.

(Note: Don’t forget to apply this access list to the suitable interface or you will lose points
interface fa0/1
ip access-group 100 out

And in the exam, they may slightly change the requirements, for example host A, host B instead of host C… so make sure you read the requirement carefully and use the access-list correctly)

I created this sim in Packet Tracer v5.2.1 so you can practice with it. You will need new version of Packet Tracer to open it (v5.1+).

accesslist_sim2_packet_tracer.jpg

Download this sim here

Notice: After typing the commands above, if you make a “ping” from other hosts (PC0, PC1, PC3) then PC4 (Finance Web Server) can still reply because we just filter HTTP traffic, not ICMP traffic. To generate HTTP traffic, select “Web Browser” in the “Desktop” tab of these PCs. When a web browser opens, type the IP address of Finance Web Server and you can see how traffic flows in Simulation Mode.

accesslist2_test_http.jpg

And notice that in the initial configuration of this sim the Core network can ping Finance Web Server. We have to create an access-list that can filter this traffic too.

Other lab-sims on this site:

CCNA NAT SIM Question 1

CCNA NAT SIM Question 2

CCNA Frame Relay Sim

CCNA Configuration SIM Question (RIPv2 SIM)

CCNA VTP SIM

CCNA EIGRP LAB

CCNA Drag and Drop SIM

CCNA Implementation SIM

Comments
Comment pages
1 ... 12 13 14 15 16 ... 19 41
  1. Sunny
    January 8th, 2012

    Hello Guys,

    Can anyone please send me the latest dump at rhtd_main@yahoo.com…thanks!

  2. maxamillion.2005@gmail.com
    January 9th, 2012

    Can anyone please send me the latest dump at maxamillion.2005@gmail.com …thanks!

  3. Anonymous
    January 9th, 2012

    The .30 in the diagram, is that in the real exam?

    Thanks

  4. Anonymous
    January 9th, 2012

    HI all,
    Could you please send latest dumps on nirajdhamangave@gamil.com
    Thanks!

  5. RaeNunez
    January 9th, 2012

    I guess that you should be awarded by some thesis service for your really good research just about this topic. Not lots of people can compose the same high quality thesis statement.

  6. aRCy
    January 9th, 2012

    QCK reference for first timers:
    =====================
    960/1000 , total 45+3 sims questions, done on 5.1.2011
    100% of this dump is valid – was in test (had 5 easy new questions)
    SIMs: exact as on 9tut.com with slight differences
    ACL2 -> allow only host A to connect to web server
    VTP -> 5 questions from 9tut, except one regarding VTP revision on switch X was LOWER
    EIGRP -> AS with different number #22, and i removed one route from core router which
    did not affect funcionality but was additional thus not needed
    time for test: 90 min for native speakers, 120 for non-english speaking countries.
    Thank you so much 9tut and collisio dump from examcollection.com

  7. Anonymous
    January 9th, 2012

    The .30 which is in the diagram will that be in the exam?

    Thanks

  8. Nabil
    January 10th, 2012

    Thanks 9tut, i passed today with 986 score, I’m so grateful for you guys, The exam was so easy, don’t be afraid.
    watch out from Access List Sim 2 LAB.

  9. Anonymous
    January 10th, 2012

    @Nabil and aRCy

    In this sim ACL2 was the .30 shown in the figure in the exam?

    Cheers
    Mike

  10. Davenport27Maggie
    January 11th, 2012

    A really delightful idea just about this. Study and don’t forget – if you have to work and study at the same time, there are old pros who are ready to benefit you with your essays when you under time burden. I’d recomend in this case the most loyal amongs thesis writing service where you can barter for custom content.

  11. Nabil
    January 11th, 2012

    @ anonymous
    yes, .30 was show in the fig. just show run and you will see the related interface,
    But in my exam the question come like this:

    1- Host C should be able to use a web browser(HTTP)to access the Finance Web Server access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80
    2- Other types of access from host C to the Finance Web Server should be blocked
    3– All access from hosts in the Core or local LAN to the Finance Web Server should be blocked access-list 100 deny ip any host 172.22.242.23

    watch the no. 3 requirement cause it’s tricky one

    regards,

  12. Anonymous
    January 11th, 2012

    @Nabil

    Yeah i know the 3 requirements, just wanted to make sure the .30 was shown in the exam. Also what exam questions did you use, im using pass4sure?

    Thanks

  13. Flesz
    January 11th, 2012

    Stop polluting the site with useless comments like please send me dumps WTF , find it yourself! ffs

  14. Nabil
    January 11th, 2012

    @ anonymous
    not at all
    I also used Pass4sure (valid copy)
    Good luck

  15. Nabil
    January 11th, 2012

    @ 9tut.com
    the information we found in your site is so useful and helpful, but comments for people like send me dump must me removed as i think
    regards

  16. Shmulik
    January 11th, 2012

    Today i passed the CCNA exam with score of 867. I had EIGRP,ACL2, And some small Lab with 5 questions. Thank you 9tut for helping me pass it !

    Thank you.

  17. adi
    January 12th, 2012

    @Nabil nr 2 requirement ?

    1st : access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80
    2nd:
    3rd: access-list 100 deny ip any host 172.22.242.23

  18. boyi
    January 12th, 2012

    Anybody knows if the autocomplete for commands and the help with ?, works in the sims in the exam? i think this is very important, because you dont have to learn the commands by heart.
    please, im have the exam next week and i need to know.

    thanks

  19. pass CCNA
    January 12th, 2012

    @boyi: sorry i didnt check that thing today, but the tab key works. In my opinion, you should learn by heart, just configure some labs by your own then all the commands will be remembered automatically.

    Sim Labs: EIGRP, ACL2, and VTP orderly in the exam for today.

    Thank 9tut, xallax and all of you to discuss valuable questions here.

  20. pass CCNA
    January 12th, 2012

    In my report today, somehow just has 50% on ACL sim lab even thought I had checked carefully on 4PCs after configuration. They had worked as intended which PC1 can be able to get to Financial Web, and 3 others one can not. Have no idea.

  21. HARSH
    January 12th, 2012

    Can any one say how can i access the command in real exam??

  22. kashif
    January 13th, 2012

    passed the test with 947 marks ALHAMDULILLAH.
    -ACL Sim —>same as 9tut.Must practice modifications also.
    -VTP sim —>5 ques all from 9tut.
    -EIGRP —>AS 12. the router names are different.
    BEST of luck.

  23. Anonymous
    January 13th, 2012

    @kashif

    in the acl2 which 3 statements did you get?

    Cheers

  24. Aquil
    January 13th, 2012

    Hi all, Thanks 9tut, cleared CCNA yesterday. SIM are EIGRP,acl2 and VTP almost same. with small change in eigrp. Dumps are still valid.
    Changes are:-
    In EIGRP there was no routing on main router(which is connected to ISP)
    Rest are almost same.All the best for all.
    Thanks

  25. Mike
    January 13th, 2012

    @Aquil

    In the acl2 which 3 statements did you get?

    Thanks

  26. kanwar
    January 14th, 2012

    HI all,
    Could you please send latest dumps on kanwaramir70@gamil.com
    Thanks………..!

  27. Anonymous
    January 15th, 2012

    tomorow my exam
    pls dima dima dumps valid?

  28. Ali
    January 15th, 2012

    Hi,
    Any one can please send me dumps or exam helping material. i am going to appear in ccna exam in coming week. Thank You
    Send me latest dumps at syedabuhanzalah@gmail.com
    Thank You

  29. Arsalan
    January 15th, 2012

    i am currently using packet tracer 5.3.2 i applied the above access list and when i accessed web page of finance server on host c i got the “Server Reset Connection” error please tell me how to fix it
    do somebody witnessed during exam such error ??

  30. Arsalan
    January 15th, 2012

    replaced the finance server with a generic server and problem, solved

  31. Sam
    January 16th, 2012

    I had trouble with ACL2 sim. during the simulation, when i entered “copy running-config startup-config” the statement “ip access-group 101 in” in fa0/0 was not being appended to startup config. the ACL declaration were available in both startup and running config, but the inbound statement in fa0/0 could be seen in the running config and not in the startup config; no matter how many times i ran “copy running-config startup-config” It was frustrating.

  32. asif
    January 16th, 2012

    what about the new dumps thats r available in pass4sure any 1 can explain and the last time the command of “no router eigrp ” is not working as its working now

  33. Yousuf Shahzad
    January 16th, 2012

    Any one plz send me the latest dump. I m using 486 dump. I m going to attempt CCNA exam on 20th Jan. plz send me the latest dump on jonsm_k@yahoo.com

  34. Vickie
    January 16th, 2012

    hey guys,

    I will be taking my CCNA Exam on 30th Jan. Can someone kindly send me the latest dump on cillahwangui@gmail.com

    Thanks.

  35. adi
    January 16th, 2012

    what are all 3 statement in ACL ?

  36. Anonymous
    January 16th, 2012

    please send me latest dumps I am taking exam on jan 26th johncallaghan1100@yahoo.ie

  37. akp
    January 18th, 2012

    I take the test sunday wish me luck i swear i been on this sight everyday for the past month. I read the lamelle book which was helpful for a general understanding but this website really helps for understanding with all tutorials and explanations…. thank 9tut wish me the best…

  38. g-shock
    January 19th, 2012

    here’s the config to allow host C .3 access Finance web server .23

    Corp1#config t
    Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80
    Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80
    Corp1(config)#access-list 100 permit ip any any
    Corp1(config)#interface fa0/1
    Corp1(config-if)#ip access-group 100 out
    Corp1(config-if)#end
    Corp1#copy running-config startup-config

  39. @anju
    January 19th, 2012

    hi guys! if you follow the correct command for the last example explained by 9tut: “access-list 100 permit ip any host (IP of Public Web Server)” and it turned out that there’s really a bug, how much points do you think will be lost? just want to be cautious coz wat if this has been fixed. anyone encountered this again on recent exams?

  40. lionel
    January 19th, 2012

    hi all could some one help me with the latest dumps for ccna pleeeaaasseee i havve my exams in less than a week now and i really need to take the dumps… thanks to you all . lots of love

  41. lionel
    January 19th, 2012

    hi all could some one help me with the latest dumps for ccna pleeeaaasseee i havve my exams in less than a week now and i really need to take the dumps… thanks to you all . lots of love here is my address nlt101kl213@yahoo.com

  42. Anonymous
    January 19th, 2012

    Lionel hit the books and don’t worry about dumps.

  43. georggy
    January 19th, 2012

    i write tomorrow

  44. KillBill
    January 20th, 2012

    I just took a test not to long ago, i didnt pass. ( i lost $250)Now i’m so happy, i just found this website. the real test look almost the same what i see in here.
    If you have a update , please email to me bill2me69@yahoo.com
    I will take a test again. If i pass the ccna . I will do something really nice to you, just like what you did to me. Thanks

  45. PH-Macky
    January 20th, 2012

    * There are some reports about the command of “All hosts in the core and on the local LAN should be able to access the Public web server” saying that the correct command should be “access-list 100 permit ip any any”, not “access-list 100 permit ip any host (IP of Public Web Server)”. Although I believe the second command is better but maybe you should use the first command “access-list 100 permit ip any any” instead as some reports said they got 100% when using this command (even if the question gives you the IP address of Public Web Server). It is a bug in this sim.

    Regarding this statement, I believe that access-list 100 permit ip any any is the better/correct statement because, althought not explicitly stated that it is needed in the problem, this will not prevent hosts from requesting service from the DNS server.

    Permit ip any host PUBLIC_WEB_SERVER_IP does suffice for accomplishing the needed task of allowing all hosts to access the public web server. But it also will block them from getting service from the DNS server. Any thoughts?

  46. Ishmaiel 2012
    January 20th, 2012

    i passed my CCNA exam yesterday.see you CCNP

  47. Ahmed
    January 20th, 2012

    I’ll take the exam tomorrow

  48. Honest
    January 21st, 2012

    I’m stunned by how little knowledge some people demonstrate here.
    There’s no way to be a great professional if you don’t really understand basics concepts.
    Use wisely those labs and don’t just memorize all questions… Remember: network requires lots of pratice and experience above all. First and foremost, an CCNA it’s just a formal paper for your employer!

  49. Stigmata
    January 21st, 2012

    Hi: i have a exam on 26/1/12, Is any one explain me about format of ccna exam and how they marking the paper…thanks

  50. asif
    January 22nd, 2012

    Plz tell me about the exam access list problem thats the come at last of config- (copy run-config startup-config)if any1 done the exam in these days Best of luck to all exam holder

  51. waqas
    January 22nd, 2012

    @All would you like to please send me the latest dumps i have exam within ten days
    xgoldy4u@yahoo.com

  52. Danny
    January 23rd, 2012

    hi everyone !
    I took ccna exam yesterday but failed with 793 marks, most of the questions were from acme(collisio) dumps and labs were EIGRP,ACL2,VTP same as 9tut, but i still failed because i took it easy, badluck :(
    neway now i am planning to retake my exam in next month and i wanna ask that do cisco change their exam for retakers ?? can i relly on dumps and 9tut (for labs) again ??
    or exam procedure, questions and labs will be new ?? please help

  53. jan
    January 23rd, 2012

    my exam was also on 23rd 9:am this was my 2nd chance i took 930 marks

  54. georggy
    January 23rd, 2012

    Hi ,
    what does ‘server reset connection’ mean?….,really to me i think it means that u have access to d serve via d web using d appropriate host.Do you really think this statement denote some kind of error in d connection to d server?Do we need to replace d server?…

  55. naath
    January 24th, 2012

    Hi, Im planning to take my CCNA in 30th January, Im Very thankful if Anyone can mail me latest dumps and simulators,

    naath2012@gmail.com

    thanks

  56. Danny
    January 24th, 2012

    @jan
    I took ccna exam yesterday but failed with 793 marks, most of the questions were from acme(collisio) dumps and labs were EIGRP,ACL2,VTP same as 9tut, but i still failed because i took it easy, badluck :(
    neway now i am planning to retake my exam in next month and i wanna ask that do cisco change their exam for retakers ?? can i relly on dumps and 9tut (for labs) again ??
    or exam procedure, questions and labs will be new ?? please help

  57. srilak
    January 24th, 2012

    Thanks for the sim

  58. mark
    January 24th, 2012

    something’s wrong with the packet tracer sim, i thought i was setting up my access lists wrong. I couldn’t ping the public web server (provided the actual exam says we should be able to access the public server and dns servers with any host/router normally) because the ip address of it ends with .3, also notice the other server they tried to put a .30 in it which is the fa 0/1 interface of the router we’re configuring, resulting for it not to have an ip address.

    the ip addressing set on that lan is /28, so the hosts ip should be between 17 and 30.

    so if you’re downloading this sim correct the ip addressing first.

  59. adi
    January 24th, 2012

    @mark, thanks ! in real exam is the same ?

  60. BRONZ
    January 24th, 2012

    Assalam-o-Alaikum

    Passed CCNA yesterday 23rd Jan with 986.

    Acme Collisio dumps are good and you can use DHARANI too but for new questions but trust Acme Collisio for the old questions because some questions in DHARANI (the old ones) are not right.

    Got 48 questions in total 45 MCQs and 3 SIMS (VTP, ACL-2, EIGRP)

    in VTP there were some changes but the SIMS were same so if you have learned the sims not crammed no need to worry :)

    1. For Q4 the answer was Sw-AC3 because it was the root bridge
    2. For Q6 the answer was Sw-Ac3(locally) because it was updated locally
    3. For Q7 the answer was C because the revision number on Sw-Ac3 was higher than on SwX

    For ACL-2 the requirements were:
    1. Permit Host A access to Financial web server(FWS): access-list 100 permit tcp host 192.168.22.1 host 172.22.200.17 eq 80
    2. Deny Host A and All other hosts access to FWS services: access-list 100 deny ip any host 172.22.200.17
    3. Permit all other hosts access to Public Web Server(PWS): access-list 100 permit ip any any

    The ip addresses were almost like the one’s is wrote but I’m not exactly but not the case because they will be changed so just keep in mind the scenario.

    For EIGRP.
    1. The Main Router was Perimeter.
    2. The other Router was Interior.

    Just configure the routers like its done here and you will be fine. Just remember to test the connectivity of all the router among themselves no need to worry about ISP router no configuration for that.

    Thanks 9tut and ExamCollection and Pass4sure.

    Best of luck to you all :)

  61. Aerodesliza
    January 24th, 2012

    Hi guys a question from a newbie,

    Practicing the Modification number 3, I realized I don’t really need three statement to archive the goal, I’m using the below statement:

    access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq www
    access-list 100 permit ip any host 172.22.242.17
    (Explicit Deny ALL)

    Do I going to lose point if I use two statement?

    Thanks in advance
    Regards

  62. TRIGUN
    January 24th, 2012

    hi 9tut. i would just like to verify if this set of commands works well in exam?

    R1(config)#do sh acc
    Extended IP access list 100
    permit tcp host 192.168.33.3 host 172.22.242.24 eq www (5 match(es))
    deny tcp 192.168.33.0 0.0.0.255 host 172.22.242.24 eq www (24 match(es))
    permit ip any any (3 match(es))

    *I Tried it and I believe it works the same way. thanks.

  63. Aerodesliza
    January 24th, 2012

    TRIGUN, it’s not right because the Core network will have access to the Finance Server. You have to restrict that network.

    “allow ONLY host C web access to the Finance Web Server”

  64. Koffy
    January 24th, 2012

    @TRIGUN

    Your line 2 is incomplete…..or wrong…….

    You are restricting the 192………….IPs, and permitting 198…………….IP.

    The instruction is no one from the CORE nor LAN should be able to use Web Browser to access FWS.

  65. adi
    January 24th, 2012

    @trigun

    access-list 100 deny tcp any host 172.22.242.23 eq 80 (second line) if you put yours, you will only deny hosts on 192.168.33.0/24, but permit hosts from the core (198 network), but with this line, deny tcp ANY you will deny both

  66. mark
    January 25th, 2012

    hi guys, like i assumed – the exam asks you to block all other accesses from all other networks to the finance server. check the modification section in this page

    it orders u that only c can get to finance using http. pings from c should not work (though u have no access to cmd in the exam!)

    i suggest to download the sim here and configure it as necessary like my post above.

    also – you cannot ping there using the core lan u will only have http access to C and the other hosts (i used B for testing). to verify if you have the correct answers in the exam, use c to http to finance (should work), use b to do same (should be blocked). then you would have to assume that the pings from all other networks doesn’t work. so make sure 2nd line of your access list is solid.

    don’t forget to copy run start!

  67. adi
    January 25th, 2012

    @mark
    what lines did u use?

  68. adi
    January 25th, 2012

    @ mark i think the statement will be

    access-list 100 permit tcp host x.x.x.x host y.y.y.y eq 80 (use C to http to finnance)
    access-list 100 deny tcp host x.x.x.x host y.y.y.y eq 80 (deny b to finance)
    access-list 100 deny ip any any (deny all pings)
    It’s correct mark ?

  69. uday
    January 25th, 2012

    @9tut
    The CCNA access sim 2 question is not able to be opened in packet tracer after downloading. It is not a valid packet tracer file is the reply I’m getting from the computer. when attempted to practice it. please help me……………

  70. carter
    January 25th, 2012

    Hi
    I’ve had 3rd modification today, I did as you wrote. I got 976 so it is ok. Thanks for help

  71. stigmata
    January 25th, 2012

    Hi all
    congrats Carter, Please could you tell me how many simulation coming in exam?….i have exam on 26/1/12 !!!!!!!

  72. john
    January 25th, 2012

    Hi; how many questions coming in ccna exam ?

  73. @mark
    January 25th, 2012

    @mark, need some clarifications please help – ciscolikesme@gmail.com

  74. carter
    January 25th, 2012

    @stigmata
    thanks, i had 3: vtp, acl2, eigrp. Questions all from colisio, mayby 1, 2 new. Good luck tomorow :)

  75. Silvain
    January 26th, 2012

    Can any one send me details on how to use GNS3. Plz i just can’t get it running like Packet Tracer. My e-mail: nissy357@yahoo.com

  76. mark
    January 26th, 2012

    @ adi yep good.

  77. mark
    January 26th, 2012

    ciscolikesme – post ur question here

  78. Dido
    January 26th, 2012

    I was having 640-802 on 31 october 2011 , and that was one of the overall 3 sims i got on the exam .

  79. adi
    January 26th, 2012

    @mark, so i understand good. Your requirements was
    permit host a www access to finance
    deny host b www access to finance
    deny all pings from lan and core

  80. Solo
    January 26th, 2012

    Hi guys, am taking my exam on 4th February, can someone send collisio to my mail, please. spyadmin.bonny@nlng.com or nsikaksolomon@yahoo.com Thanks a million.

  81. Aerodesliza
    January 27th, 2012

    Hi guys, jus a simple comment: The reason why we need to use the command: ip access-list 100 permit any andy instead of ip access-list 100 permit hsot 172.22.242.17 is cause using the last one we’re going to block all traffic to the DNS Server (unknown IP).

    Hope this information help
    Regard

  82. pn
    January 27th, 2012

    Hi , i wrote the exam today. i got 947. All the questions were from this dump only. Collisio486 is 100 percent valid. And the simulation was from 9tut. Access list sim2, eigrp, vtp. Thank god and friends who share the comments.
    many thanks to those who created this dump.All the best.

  83. Ngoroko
    January 29th, 2012

    @9tut
    Just a quick question.
    What is the difference of using eq 80 AND eq http?
    I am asking this because http uses port 80 and hence to me is one and the same thing. However the answer given herein says eq 80.
    Please help. Thanks

  84. Ngoroko
    January 29th, 2012

    @9tut
    I am getting confused with ACLs. When you talk of an outbound or inbound traffic, what exactly do you mean?
    In our case on this sim, if acl is applied on fa0/0, it can only filter traffic from that LAN and not from the core as explained. Does this mean we can not have traffic from the core to the public server? Please help

  85. Ani
    January 29th, 2012

    @Mark and @adi and @Aerodsliza..

    Sum1 please answer this question..In ACL2…..can we do WEB ACCESS to the PC as a SERVER?
    ->I when I am using PC as a Finance Web server then its showing server reset connection

    whereas when using the generic server it successfully works( as in the web access happens
    nicely)..Please help me out guys…any1..!

  86. 9tut
    January 29th, 2012

    @Ngoroko:
    + eq 80 and eq http are the same. There is no difference.
    + When packets go inside the router, we call it inbound traffic. When packets go out of the router, we call it outbound traffic. Just imagine each interface is a “door” on the router. Traffic from the Core to the public server just needs to go through serial “door” (inbound) and goes out of interface f0/1 (outbound) without passing f0/0 so we can’t place an acl on that “door” to monitor the Core traffic. If we want to filter traffic from the Core traffic we must place an acl on the serial interface or the f0/1 interface.

  87. Jonathan
    January 29th, 2012

    Hi, has anybody used the geethanjali dump 669q, ive been using mostly that dump, but here in the forum, i keep reading about the collision dump, that dump is from september i guess, so should i stick with the geethanjali dump or switch to collision, have the exam on 31 jan by the way

  88. furqan
    January 30th, 2012

    Jonathan ,what about your exam?????

  89. Anonymous
    January 30th, 2012

    took my exam today…got 762/1000… :(

    in accesslist lab:
    access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80 did not work…shocked but the othr commands for denying and permitting any any worked….

    in eigrp:
    show running-config did not show the original eigrp number or ip address..showed no service stamp smething…shocked..

    in vtp sim:
    show mac address-table,show cdp neighbours,show cdp neighbours detail,show running config did not wrk…again shocked……..but show vlan,show vtp status,show interface trunk worked….

    im confused…..hve anybdy had such experience….?? :o :o

  90. mark
    January 30th, 2012

    ^anonymous, it won’t work by itself. you need to apply it to the router with an ip access group command.

    @ani when the simulator says server access connection that means you can http into the finance server, your setting is then correct (if it’s host c). in the exam it will give a more clrearer message, something like you can access it using http.

    @adi if you’re following the actual exam question your 2nd line should be access-list 100 deny any host y.y.y.y

  91. mark
    January 30th, 2012

    lol i missed the “ip” – access-list 100 deny ip any host y.y.y.y

  92. adi
    January 30th, 2012

    i don’t understand exactly what you want write there, ur english :)

    permit tcp host x.x.x.x host y.y.y.y eq 80 (permit host A to connect finance through http)
    deny ip any host y.y.y.y ( deny hosts from lan and core to access other services on finance)
    permit ip any any (permit hosts to connect to public server)

    it’s an example, this is what u want to say above ?

  93. Jonathan
    January 30th, 2012

    @furqan, what about my exam, its tomorrow, can some one answer me please, if the geethanjali dump is any good, or should i stick to collision

  94. furqan
    January 30th, 2012

    @jonathan dude ,i think y0u sh0uld 0nly see Collisio486 dumps because every0ne here in 9tut rec0mend these dumps .must tell me ab0ut y0ur exam because my exam is als0 0n next m0nday and d0nt f0rget t0 learn 3 sim.acls,eigrp & vtp because i see many views here and every0ne said that they have these 3 labs.best of luck !!!!!!!!!!!!

  95. Jonathan
    January 31st, 2012

    @furqan thanks man!! will do, i think its a little late for me since i ve spend almost all my final days of preparation studying the other dump, but i have reviewed a lot of question from this site, hope that covers it, any way i think ive grasp the concept of the sims, the only thing that worries me is that a friend who took the exam a little while back said the autocompletion and ? doesnt work dont know if its in some countries or is some bug, i’ll post tomorrow, fingers crossed.

  96. M Asim Hameed
    January 31st, 2012

    By the grace of GOD, I have got 1000/1000 in CCNA at 27th January. The labs were EIGRP,ACL2,VTP with minor changes like AS Nos., IP,s etc.
    Thanks 9tut, ACME 486 collissio.
    02 Questions out of course from 486 q.
    for any query can contact me: +923009762037

  97. furqan
    January 31st, 2012

    @m asim hameed you give exam in lahore?????

  98. Stefan
    January 31st, 2012

    I passed today, still valid dump, like everybody, I also had ACL2, EIGRP, VTP with slight changes.

  99. furqan
    January 31st, 2012

    @ stefan how much questions were out 0f dumps?????and from which portion???

  100. Anonymous
    January 31st, 2012

    @mark
    ya i gave ip access-group commands also for the interfaces….oly tht acces-list permit line did not wrk…its sayin invalid cmd..smething…..

Comment pages
1 ... 12 13 14 15 16 ... 19 41
  1. No trackbacks yet.
Add a Comment