access lists

Good Day,

In this command access-list 120 permit ip any any from what i've read it would appear as though the first any is in reference to the source address and the last any is the destination. I am not however sure how to use them. Could someone please explain to me how it works?

Thanks

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

WilliamK99

You are correct, in access lists you can specify a specific device or a network, or even all by using any.

access-list 120 permit ip host 10.10.10.1 0.0.0.255 any

The command I typed before allows only this specific ip address access to any network, of course by using deny, you prevent this device from accessing any network.

What you showed is a blanket statement you use after most deny extended access-lists to allow all other traffic to, because of the implicit deny statement at the end of all access lists.

Let me know if you need further clarification.

miller811

SB-K wrote: »

Good Day,

In this command access-list 120 permit ip any any from what i've read it would appear as though the first any is in reference to the source address and the last any is the destination. I am not however sure how to use them. Could someone please explain to me how it works?

Thanks

Seriously, do some research on topics before asking such broad questions.
Everyone is willing to help, but it appears from the line of questions you keep asking you are expecting some one on one tutoring.

SB-K

Thanks WilliamsK99 that really clarified things.

SB-K

I actually do my own research, as you might have seen from my line of questions i state what i know based on what i have read and then i mention at what point i do no not undertstand so i can get clarification from more knowledge people than myself at this forum.

Some books are not all that simple to read and understand they do not speak down to average people such as myself. That is why i like this forum. Persons here can take complex topics and break it down so even a three year old can understand.

Based on the response i got from Williamsk99 its obvious that the question was not too broad as he answered it simplier than any book or site that i've read.

I do not require a one on one tutoring i just ask questions that i need clarification on like anyone else. If i am breaking any rules please let me know.

blackninja

Hi SB-K, welcome to the forum

Although you are not breaking any rules when asking your questions, you do seem to ask questions that would be answered if you where studying from either Todd Lammle's or Wendell Odom's books.

If you havn't already I would recommend getting Wendell Odom's books and CBT nuggets, then almost all will become clear(ish).

We are a very helpful bunch here and we'll help when we can.

billscott92787

I've seen these in places in the work force, our VPN users that are contractors are assigned access lists when they connect to our network. I'll have to dig around, I need a little bit more to grasp them as well. You guys are always so helpful here

SB-K

Hi Blackninja

It is nice to know that there are still people out there who can correct you without trying to be insulting. I'll construct my questions more to the forums liking.

Value all your help, Thanks.

wbosher

CBT Nuggets is a great place to start. Everything is explained so that "a three year old" could understand.

It does lack the detail as some other video series' and books, such as the Cisco Press book, but it is a great base to work from.

skwira001

To goes source to destiniatoin. The same is true with the copy command in DOS. copy c:\myfiles c:\myfiles_backup c:\myfiles is the source c:\myfiles_backup is the destiniation. Most of the time it will be that way.

miller811

SB-K wrote: »

Hi Blackninja

It is nice to know that there are still people out there who can correct you without trying to be insulting. I'll construct my questions more to the forums liking.

Value all your help, Thanks.

Dude, I am trying to help you not insult you,

everyone needs clarification on certain topics.
Search, Research, Google, Cisco.com are all great resources...

The point I was trying to make that a few of your questions did not lead "ME" to believe that you were giving it your best shot.

see below

"Can someone please kindly tell me what console messages with regards to router is."

"Could someone please provide a simple explanation for exec and incoming banners. "

mikej412

SB-K wrote: »

Could someone please explain to me how it works?

What are you using to study for the CCNA? If we at least had a clue what you were using then maybe we could point out where the answer is -- or point to a better resource that actually has the information.

Mark Knutson

blackninja wrote: »

Hi SB-K, welcome to the forum

Although you are not breaking any rules when asking your questions, you do seem to ask questions that would be answered if you where studying from either Todd Lammle's or Wendell Odom's books. ..

I had the same thought.

mella060

This link may be of some help to you.

Let me google that for you

peanutnoggin

mella060 wrote: »

This link may be of some help to you.

Let me google that for you

****OFF TOPIC****

Mella, thanks for that link... I hadn't seen that before. Very interesting.

V/r

~Peanut