What effect would the Router1(config-ext-nacl)# permit tcp 172.16.4.0 0.0.0.255 any eq www command have when implemented inbound on the f0/0 interface?
- All TCP traffic is permitted, and all other traffic is denied.
- The command is rejected by the router because it is incomplete.
- All traffic from 172.16.4.0/24 is permitted anywhere on any port.
- Traffic originating from 172.16.4.0/24 is permitted to all TCP port 80 destinations.
Explanation & Hint:
The command “Traffic originating from 172.16.4.0/24 is permitted to all TCP port 80 destinations.” This command configures an extended access control list (ACL) on a router. Here’s the breakdown of the command:
So, the command effectively allows all TCP traffic originating from the 172.16.4.0/24 subnet and destined for port 80 (HTTP) on any host. Other types of traffic from this subnet, or TCP traffic to ports other than 80, would not be permitted by this rule. It’s important to remember that this rule is part of an access control list, and the effect of the ACL depends on the other rules in the list and the order in which they are placed. |