199k views
3 votes
Access-list 101 deny ip any

access-list 102 permit ip any
interface GigabitEthernet0/0
access-group 101 in
access-group 102 in

Will traffic destined for the /24 network be allowed? Why?
a. Yes
b. No

User Sekar
by
7.2k points

1 Answer

2 votes

Final answer:

In the provided configuration, traffic destined for the /24 network will not be allowed because access-list 101, which denies all IP traffic, is applied to the interface in the inbound direction and overrides access-list 102 that permits all traffic.

Step-by-step explanation:

The student's question concerns Access Control Lists (ACLs) in a networking context, specifically within Cisco network devices. Here, the ACLs are being used to filter network traffic going into an interface on a router.

The first access list, access-list 101, denies all IP traffic (ip any) from passing through. The second access list, access-list 102, permits all IP traffic.

However, both access lists cannot be applied in the same direction (in) on the same interface. In this case, access-group 101 is applied in the inbound direction on GigabitEthernet0/0, which will deny all inbound traffic, overriding the second ACL that permits all traffic. Therefore, even the traffic destined for the /24 network will be denied.

The access-lists 101 and 102 in the given configuration are used to control traffic entering the GigabitEthernet0/0 interface. The first access-list, 101, denies all IP traffic from any source address.

The second access-list, 102, permits all IP traffic from any source address. Since access-list 101 is applied before access-list 102, any traffic destined for the /24 network will be denied by access-list 101 and will therefore not be allowed to enter the interface. Therefore, the correct answer is No

User Coxley
by
7.9k points