it's a ACL a layer 4 transport layer protocol ?

yrwinsyrwins Member Posts: 81 ■■□□□□□□□□
it's a ACL a layer 4 transport layer protocol ?

Comments

  • fearlessfreap24fearlessfreap24 Member Posts: 10 ■□□□□□□□□□
    I believe an ACL resides in Layer 3. A normal ACL can block a host or block of IP address which are layer 3. An Extended ACL can block a protocol but still uses IP address to do so.
  • yrwinsyrwins Member Posts: 81 ■■□□□□□□□□
  • james43026james43026 Member Posts: 303 ■■□□□□□□□□
    From a network point of view, an ACL can go up to layer 4, if we are talking about extended ACL's.
  • clarsonclarson Member Posts: 903 ■■■■□□□□□□
    ip acl is layer 3
    an extended acl is either layer 3 or 4
  • NiceRouteNiceRoute Member Posts: 8 ■□□□□□□□□□
    If it can block logical ports, then it can be referred to as working at layer 4.
  • OctalDumpOctalDump Member Posts: 1,722
    No. An ACL is not a protocol. Cisco ACLs can modify the behaviour of traffic from layer 2 up. Typically at CCNA level you deal with ACLs that modifying traffic at layer 3 and 4. Eg, block all traffic from this IP (layer 3), or allow access to only these ports (layer 4) at this IP.
    2017 Goals - Something Cisco, Something Linux, Agile PM
  • TheFORCETheFORCE Member Posts: 2,297 ■■■■■■■■□□
    OctalDump wrote: »
    No. An ACL is not a protocol. Cisco ACLs can modify the behaviour of traffic from layer 2 up. Typically at CCNA level you deal with ACLs that modifying traffic at layer 3 and 4. Eg, block all traffic from this IP (layer 3), or allow access to only these ports (layer 4) at this IP.

    About to say that, ACL's are not protocols. You can have ACL is many different type of devices.
  • Cisco InfernoCisco Inferno Member Posts: 1,034 ■■■■■■□□□□
    standard ACL's block L3 traffic based on IP address. Extended ACL's can filter things based on L4 Port info on top of that.
    ex. Blocking Port 80 web traffic to a specific subnet. (like a kiosk pc or something)
    2019 Goals
    CompTIA Linux+
    [ ] Bachelor's Degree
Sign In or Register to comment.