Modules: | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | All |

Module 3: Router ACLs and CBAC

Module Overview |
3.1 | Access Control Lists

3.1.1 | ACL basics
3.1.2 | Understanding ACL concepts
3.1.3 | Summarizing ACLs
3.1.4 | Processing ACLs
3.1.5 | Appling ACLs
3.1.6 | Editing ACLs
3.1.7 | Troubleshooting

3.2 | Types of IP ACLs

3.2.1 | Standard ACLs
3.2.2 | Extended ACLs
3.2.3 | IP named ACLs
3.2.4 | Commented IP ACL entries
3.2.5 | Lock-and-key, dynamic ACLs
3.2.6 | Reflexive ACLs
3.2.7 | Time-based ACLs using time ranges
3.2.8 | Authentication proxy
3.2.9 | Turbo ACLs
3.2.10 | Context-based Access Control

3.3 | Context-based Access Control (CBAC)

3.3.1 | ACL limitations
3.3.2 | How CBAC works
3.3.3 | CBAC supported protocols

3.4 | Configure CBAC (Task 1 and 2)

3.4.1 | Configure alerts and audit trails
3.4.2 | Global timeouts and thresholds
3.4.3 | Global half-open connections limit

3.5 | Task 3: Port to Application Mapping (PAM)

3.5.1 | PAM overview
3.5.2 | System-defined port mapping
3.5.3 | User-defined port mapping

3.6 | Task 4: Define Inspection Rules

3.6.1 | Overview of inspection rules
3.6.2 | Inspection rules for applications
3.6.3 | Inspection rules for IP packet fragmentation
3.6.4 | Inspection rules for URL Filtering
3.6.5 | Inspection rules for ICMP

3.7 | Task 5: Inspection Rules and ACLs Applied to Router Interfaces

3.7.1 | Applying inspection rules and ACLs
3.7.2 | Two interface firewall
3.7.3 | Three interface firewall

3.8 | Task 6: Test and Verify CBAC

3.8.1 | Show and debug commands
3.8.2 | Remove CBAC configuration
3.8.3 | Configuring a null interface

Module Summary |
Module Quiz |

| Close Window |

| All contents copyright © 2002 Cisco Systems, Inc. All rights reserved.