CCNA Security 640-554 Official Cert Guide

Chapter 11. Using Access Control Lists for Threat Mitigation

This chapter covers the following subjects:

• Access control list fundamentals and benefits

• Implementing IPv4 ACLS as packet filters

• Implementing IPv6 ACLs as packet filters

You can use an access control list (ACL) in many different ways, including identifying traffic in a class map for a Zone-Based Firewall on the IOS router or in a class map on an Adaptive Security Appliance (ASA) firewall. You can also use an ACL to identify traffic that should be sent over a virtual private network (VPN), given priority treatment, or have Network Address Translation (NAT) performed. Many features rely on the ability of an ACL to identify (classify) traffic. ACLs can also be used to apply filtering. ...