What would be the effect of Issuing the command ip access-group 115 in on the s0/0/1
interface?
No host could connect to RouterC through s0/0/1.
Telnet and ping would work but routing updates would fail.
FTP, FTP-DATA, echo, and www would work but telnet would fail.
Only traffic from the 10.4.4.0 network would pass through the interface.
Answer: A
Explanation:
First let’s see what was configured on interface S0/0/1:
Got the answer right but I am not sure as to the reason why. The other answers didn’t make sense so process of elimination. If someone smarter than me can explain it, I would appreciate it.
I am thinking the wildcard mask of 255.255.255.0 allows networks but not hosts .. ergo answer = A?
0
0
@Craig: “I am thinking the wildcard mask of 255.255.255.0 allows networks but not hosts”: I think you are fully right, the trick is that the network themselves do never send anything, only the hosts and devices belonging to the network may send something. Therefore there will never be any legitimate packet bearing a network packet as source.
To put it another way: a host (in the broad definition of the term, including any IP device) may be affected neither a network nor broadcast addresses in IPv4. Therefore, allowing only network addresses will block all hosts.
0
0
access list uses wildcard mask a wild card of 255.255.255.0 doesnt look right, it is equivalent to 0.0.0.255 mask which is invalid, so i think that line doesnt do any thing and there is an implicit deny all at the bottom of any acl thus you have affectively blocked all traffic
0
0