200-301 sample questions answers

200-301 sample questions answers.Note that the command output shows whether the ACL is enabled in both directions and which ACL it is. the example is an abbreviated version of the show ip interfaceS0/0/1 command, listing messages for only this one interface. the show ip interface command lists similar messages for each interface of the router.Step 2 then says that the contents of the ACL must be found. The quickest way to view the ACLs is still to use the show running-config122 Chapter 5, Part 2 Troubleshooting IPv4 Routingcommand. If this command is not available, the show access-lists and show ip access-lists commands list the same details as the configu-ration command, along with a counter that keeps track of the number of packets that match each line of the ACL. As shown in Example 5.9.Example 5-9 Example of the showipaccess-lists CommandRl# show ip access-lists Extended IP accesslist 10210 permit ip 10.1.2.00.0.0.25510.1.4.00.0.1.255 (15 matches)After discovering the location, direction, and various configuration information for the various ACLs in steps 1 and 2, we're about to get to the hardest part - parsing what the ACLs are actually doing.Particularly interesting in the troubleshooting tips step is the last step, 3fo Example 5-9 The ACL shown in Example 5-9 has several packets (15 so far) that match the single configured access-list statement on line 102 of the ACL. However, because of the reject all packets logic used at the end of the ACL, some packets may have been rejected. If you configure the access-list 102 deny ip anyany command at the end of the ACL, which obviously matches all packets and drops them, the show ip accesslists command displays the number of packets that were dropped at the end of the ACL.Finally a hint on ACL command parsing. it is easy to determine the range of addresses that match the address and wildcard mask when you know that a command is coming from the server. The lower end of the range is the address (the first digit), and the higher end is the sum of the address and wildcard mask. For example, in ACL 102 of Example 5-9, it is clear that this is a configuration on a particular router with the following range.