Question 4 (15 points)

Determine if a packet with the given source address will be allowed or denied.

1. ACL statements:

access-list 65 deny 172.16.1.1 0.0.0.0.0

access-list 65 permit 172.16.1.0 0.0.0.255

First packet has a source IP address = 172.16.1.1

Allow or Deny?

Next packet has a source IP address = 172.16.1.2

Allow or Deny?

2. ACL statement: access-list 55 permit 192.168.15.0 0.0.0.0.3

Source IP address of the packet being inspected: 192.168.15.5

Allow or Deny?

3. ACL statement:

access-list 45 deny 192.168.223.32 0.0.0.0.31

access-list 45 permit any

First packet has a source IP address = 192.168.223.60

Allow or Deny?

Next packet has a source IP address = 192.168.223.30

Allow or Deny?

4. What type of ACL statements are the ones above (standard or extended ACL)? Why?

Why do the deny statement always have a permit statement afterwards?