Refer to the exhibit. An administrator configures the following ACL in order to prevent devices on the 192.168.1.0 subnet from accessing the server at 10.1.1.5:
access-list 100 deny ip 192.168.1.0 0.0.0.255 host 10.1.1.5 access-list 100 permit ip any any
Where should the administrator place this ACL for the most efficient use of network resources?
- outbound on router A Fa0/1
- outbound on router B Fa0/0
- inbound on router A Fa0/0
- inbound on router B Fa0/1
Explanation & Hint:
In a network, Access Control Lists (ACLs) are best placed to filter traffic as close to the source as possible when denying traffic, to conserve bandwidth and processing on the network devices along the path. For permitting traffic, it is generally placed as close to the destination as possible. Since the goal here is to prevent devices on the 192.168.1.0 subnet from accessing the server at 10.1.1.5, you want to stop the unwanted traffic as soon as it originates. Given the options provided and the scenario described, the ACL should be placed:
This will ensure that traffic from the 192.168.1.0 subnet is filtered as it leaves the local network and before it traverses any part of the network infrastructure, thus conserving network resources. |