ccna by jeremy

ccna by jeremy.Once you have configured an ACL to identify traffic that the ASA allows or denies, the next step is to apply the ACL to an interface, either in the inbound or outbound direction. Apply the ACL in the following manner.access-group access-list (in | out} interface interface-name [per-user-override | control-plane]To verify an ACL, use the showaccess-list and show running-config access-list commands.To erase a configured ACL, use the clear configure access-list id command.9.2.6.5 ACLs and Object GroupsConsider a topology where two external hosts need access to two internal servers that provide Web and E-mail services. Any other traffic attempting to pass through the ASA should be dropped and logged.The ACL requires two ACEs for each host to accomplish this task. The implicit deny all statement will drop and log any packets that do not match the E-mail or Web services. ACLs should use the remark command to do a thorough logging.To verify ACL syntax, use the showaccess-list and show running-config access-list commands.9.2.6.6 ACL Example Using Object GroupsObject groups are used to group similar items together to reduce the number of ACEs. By grouping similar objects together, you can use object groups in an ACL without entering a separate one for each object. Without object groups, the configuration of a security device can contain thousands of lines of ACEs, which is very difficult to manage.