ICND2 - ACL Inside & Outside interfaces?

Beany

Morning,

i'm currently studying this topic ( I know its not on the 200-101) but i'm curious to know if anyone get confused working out what the IN or OUT interfaces would be? I get the idea but was thinking if the network is huge then this would definitely become confusing for me.

Do you follow a method to work this out?

thanks

steveyeung

imagine yourself as a router, the inside interface is where the packet get inside you.
and the outside interface is where the packet get out of you.

DoubleNNs

Wait.. ACLs were on the old ICND2 but taken out of the new ICND2?

ph1x10n

Yea there now in ICND1.

http://www.ccnaskills.com/announce2013-2/

Good breakdown of the changes between the old and new versions of ICND1/2 there.

DoubleNNs

So essentially, by doing the old ICND1 and the new ICND2, i'll effectively skip over ACLs completely?
Interesting..

steveyeung

DoubleNNs wrote: »

So essentially, by doing the old ICND1 and the new ICND2, i'll effectively skip over ACLs completely?
Interesting..

yes, it's weired. acl is a major topic in networking, how can cisco issue a ccna cert. without testing one's acl knowledge?

networker050184

You'll probably skip over being tested on them, but I wouldn't skip learning them throughly. ACLs are a big part of a lot of things you will do in IOS. The new ICND2 seems to be more centered around implementing and troubleshooting advanced routing/switching topics and ICND1 is more around the basics and broad operating concepts of routing/switching.

steveyeung wrote: »

yes, it's weired. acl is a major topic in networking, how can cisco issue a ccna cert. without testing one's acl knowledge?

Just one of the quirks of testing during the transition.

DoubleNNs

I'm contemplating on testing for the new ICND1 before going for the new ICND2, just to fill in any gaps of knowledge that would occur otherwise.

However, I haven't decided if I want to spend the extra time/money going that route just yet..

networker050184

I'd certainly recommend getting up to speed on any knowledge gaps, but I wouldn't waste the money taking the ICND1 exam again.

PCSPreston

I recently took the old ICDN1 and working towards ICDN2. ACL's are not bad once you get the commands and then name the interfaces. For example, OUTSIDE and INSIDE for example is what I use.

theodoxa

"in" means that the ACL is evaluated when the packet enters the router [and before any routing decisions are made by that router]. "out" means the ACL is evaluated after the routing decisions have been made, but before the packet leaves the router.

From my notes (I believe I learned this from Lammle's 640-802 book)

• Inbound ACLs are evaluated before the packet is routed
• Outbound ACLs are evaluated after the packet is routed to the outgoing interface, but before it is placed in the queue

jvrlopez

IN/OUT is in relation to the direction the packet travels through the interface having the ACL applied to.

In to the interface, out of the interface.

Do not confuse or mistake this for the direction a packet travels from a host, as this will hinder your ability to comprehend applying ACLs. I made this mistake my first go around and spent a night wondering why all my statements and examples were backwards, lol!

Beany

I passed the old CCENT and now I am studying for the new ICND2. My first objective is to go through any topics that have been missed by the doing old/new exams.

What i'm getting confused with is, just say when your looking at a diagram with a single router which has a left and a right interface how would someone work out which one is going inside the network and the other out? Would this be dependant on what's connected to each interface?

steveyeung

Beany wrote: »

I passed the old CCENT and now I am studying for the new ICND2. My first objective is to go through any topics that have been missed by the doing old/new exams.

What i'm getting confused with is, just say when your looking at a diagram with a single router which has a left and a right interface how would someone work out which one is going inside the network and the other out? Would this be dependant on what's connected to each interface?

it can be both, depends on the traffic flow.
if you configure an acl on an interface's as OUT, that means your acl monitor traffic flowing outside of that interface, but not flowing inside.

RouteMyPacket

steveyeung wrote: »

yes, it's weired. acl is a major topic in networking, how can cisco issue a ccna cert. without testing one's acl knowledge?

As good as Cisco's certification process is, again and I cannot stress this enough. Certifications are supplemental to your hands on experience.

If you were working every day in a networking role, you would most definitely without a doubt be dealing with ACL's so it's no biggie. Even if you didn't work in a network role, if you were doing the appropriate labbing, you would run into them