Home > CCNA – Drag and Drop 5

CCNA – Drag and Drop 5

March 1st, 2015 Go to comments

Here you will find answers to Drag and Drop Questions – Part 5

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Explanation

In this case we want to filter port number so we have to use extended access-list so the list-number of our access-list must be from 100 to 199 -> We can choose 128. We need to find the range of the subnet 172.16.5.118/26:

Increment: 64 (/26 = 1111 1111. 1111 1111. 1111 11111. 1100 0000)
Network address: 172.16.5.64
The corresponding wildcard mask for /26 is 0.0.0.63 (because 63 = 0011 1111)

The port of Telnet access is 23 (and Telnet uses TCP). It is a well-known port that you must remember.

Therefore the full command to deny Telnet access to hosts outside the LAN 172.16.5.64 is:
access-list 128 deny tcp 172.16.5.64 0.0.0.63 any eq 23

Comments (0) Comments
  1. No comments yet.
Add a Comment