Free CCNA | Extended ACLs | Day 35 Lab | CCNA 200-301 Complete Course
ฝัง
- เผยแพร่เมื่อ 7 ก.ค. 2024
- Free CCNA 200-301 flashcards/Packet Tracer labs for the course: jitl.jp/ccna-files
📖 My CCNA Book: www.manning.com/books/acing-t...
📚Boson ExSim: jitl.jp/ccna-exsim ← the BEST practice exams for CCNA
💻Boson NetSim: jitl.jp/ccna-netsim ← 100+ detailed guided labs for CCNA
💯ExSim + NetSim: jitl.jp/ccna-kit ← get BOTH for a discount!
🥇CCNA Gold Bootcamp: www.flackbox.com/cisco-ccna-c... ← the course I used to get my CCNA (top rated course on the Internet)
Get the course ad-free with bonus quizzes and more on JITL Academy: courses.jeremysitlab.com
Download Packet Tracer: www.netacad.com/courses/packe...
In this lab for day 35 of my free CCNA 200-31 complete course, you will practice configuring extended IPv4 ACLs (Access Control Lists).
In this FREE and COMPLETE CCNA 200-301 course you will find lecture videos covering all topics in Cisco official exam topics list, end-of-video quizzes to test your knowledge, flashcards to review, and practice labs to get hands-on experience.
SUPPORT MY CHANNEL
The best way to support my channel is to like, comment, subscribe, and share my videos to help spread the word!
If you can spare to leave a tip, here are some options:
PayPal: paypal.me/jeremysitlabYT
BAT (Basic Attention Token) tips in the Brave browser (www.jeremysitlab.com/brave-br...)
======================
Patreon: / jeremysitlab
======================
Cryptocurrency Addresses
Bitcoin: bc1qxjpza7nx46e8a2rtz6vkcrvxx9mfjnufdrk0jv
Ethereum: 0x08B4325b1B99B05d850A3bfCd4A6620D770cfB64
======================
0:00 Introduction
0:59 Step 1
9:10 Boson NetSim
#cisco #CCNA - วิทยาศาสตร์และเทคโนโลยี
I am practicing your labs and then validating with your videos. I feel like I am accomplished a significant progress on the CCNA material. THANK U VERY MUCH!!
do you have your CCNA by now?
Thanks for all you do for the community. Your effort is not going unnoticed
Thanks, I appreciate it :)
this lab is very helpful to understand extended ACL, very good, thank Jeremy very much for the hard work.
I forgot permit ip any any on R1 g0/0 so my pings were failing even when I was using ip address of svr 2 to ping, and I was wondering why is it pinging for you in your video and failing in my lab. I figured it out.
Thanks for the video. I put it on each interface of R1. I had it going out of s0/0/0 inbound but this is much cleaner.
Thank you jeremy for another great video. Looking forward for more!
Thanks Alberto!
We must atleast like and subscriber to thank Jeremy for the intelligent and hardwork he has done
Hello Jeremy + Happy new year !!! thank you for your awesome courses about CCNA . All the Best..
Thanks, happy new year!
Once again, a superb video. Really great detail and very useful examples and quiz questions.
Very helpful. Thank you, Jeremy.
Really good work Jeremy, much appreciated! Your videos in conjunction with ITproTV has put me on a really good track :)
Thanks Ross :)
you have realy been doing a great job and you know how to bring up the lessons, bunch of thanks
Thank you, glad you like it :)
As a suggestion - an alternative way to show that DNS is blocked is to use the 'nslookup' command from the PC. That way, you don't need to know the host names that the DNS server has configured.
Happy new year Jeremy. I hope you will finish this course soon and start another one.
Thanks, happy new year!
Thank you sir! I got stuck on the wildcard mask block used in 15:40 which means my subnetting knowledge is not yet that strong:( . I know you mentioned regarding this on the lecture vid but i need to practice more. Once again sir thank you very much.
Always great video with a perfect explanation thank you Jeremy
Thanks Kone!
Great video Jeremy, loved the topic! Thank you
Thanks Nicholas :)
Thank you so much. it's easy to understand
After a Monmouth 2 1/2 days and 15 of your days of lessons. I’ve realised not going to be able to complete the course in a week as I planned. I calculate I would be 7 of your days short.
Still going to push through and learn it but at a milder pace. When I’m off in March maybe then I can go mad and finish it.
Your lab is great as usual. But today's Boson lab is very interesting.
Thanks!
Great lab! thank you once again
Thanks Miguel!
Great job
Awesome video, as always !
I spent way too much time trying to pick an appropriate name for my ACLs... i hate myself for that 😂
Better than totally random names that don't help at all! ;)
You are the best! Thanks!!!
Thanks Youssef :)
greetings jermey , keep up the good work
Thanks :)
thank you thank you
tysm
very good merci bcp
thanks
good work sir jeremy appreciated
Thank you :)
oh no, I have caught up. looking forward to more videos.
Glad you like the videos :) Next one coming in about an hour!
спасибо большое
Thanks for watching ;)
Day 35, I can't afford the exam... However, I'm learning and improving my networking knowledge... Thank you Jeremy
HOnestly, I wanted smash more like buttons, UNfortunately, i am not able.
Amazing content, thank you Jeremy
Thank you jeremy for sharing your knowledge with us i hope people reward/support you for your hard work. Quick question CCNA 200-301 exam has no labs in it just multiple choices is that correct ? Thanks
Hello Jeremy, your course about CCNA is the best in the internet. and the flashcards are extremely helpful. Thank you for that all.
I have a question about boson ExSim, Is the access lifetime or is the access limited?
sorry if you already mentioned it. my english is not good.
Access is lifetime! :)
Hi Jeremy,
many thanks for your awesome courses, I wan just to ask you if I can use "permit IP host 10.0.1.1 host 10.0.2.1 eq 80" command in place of "permit TCP host 10.0.1.1 host 10.0.2.1 eq 80"
that means using "IP" and no "TCP" in the first ACE
Thanks a billion times for your videos.
Can you please let me know when WIFI SDN & NETWORK PROGRAMABILITY STARTS PLEASE UPDATE
THANKS
I'll cover them at the end of the course
You merged 1st and 3nd one into ACL-id 101. What if I create another ACL for the 3rd requirement ? 100 and 101 for the first 2 requirements and 102 for the third one where we have to block http/s traffic.
The ACL name mode is case sensitive!!! Just FYI incase you can't figure out why yours isn't working! 🙂
Hi. if you apply the deny ip for pc1 you could still ping pcq because its ICMP. am i correct?
Hello Sir,
Your videos are easy to understand and fun to learn.
Is this course enough to pass the official CCNA exam?
Thanks for your efforts to teach us! It means a lot
Hello! The course isn't complete at the moment, so it won't be enough. I recommend reading the official cert guides by Wendell Odom to fill in the gaps.
hello sir i have some problem if try dns like ping pc1 then say -----Ping request could not find host pc3. Please check the name and try again.---- whats that mean still i didn't config any acl
For DNS service first I tried an inverse logic, to permit all tcp/udp traffic from 172.16.1.0/24 to SRV1 except port 53 in SRV1. Here is the excerpt from PT's CLI:
Extended IP access list 105
5 permit udp 172.16.1.0 0.0.0.255 host 192.168.1.100 neq domain
10 permit tcp 172.16.1.0 0.0.0.255 host 192.168.1.100 neq domain
15 permit ip any any
ACL 105 was applied same way to R1's G0/0 inbound.
However this solution doesn't work and I cannot understand why?
Thank you very much for the courses .how many courses are there to finish? at least as an estimate
The course is about 70% complete I think
If you double click on the devices in Boson, it would open the console. Rather than clicking once on the device and then the "console" button.
Thanks for the tip 👍
Are there any benefits to making seperate entries in the ACL for blocking TCP & UDP connections to the DNS service, instead of just denying "IP"?
UPDATE: after testing I can answer my own question haha. Denying IP wil block all IP traffic without allowing a specific port/service to be configured. So if you want to target specific ports/services, you will need to use TCP or UDP in the command.
Is it an error on CCNA to create 2 different ACLs for request 1 and 3?
Hello Jeremy great video as always! Thank you for creating such a comprehensive video on CCNA. I just want to ask how did you decide to use a /23 prefix on 15:50. Can't a /24 prefix be used on this scenario since they both have a /24 prefix? Thank you!
You could use /24, but then you'd need to use two permit statements, one for each /24 network.
@@JeremysITLab Thank you for answering! This will surely help me in my learnings.
@5:04 why is it that when u configured acl to deny traffic to SRV1 from 172.16.1.0/24, you decided to ping SRV2 instead? and y did it affect SRV2 when we only denied traffic to SRV1?
I pinged srv2 by host name to test if PC1 is able to access the DNS service on host 1. It couldn't ping srv2 by host name, meaning it couldn't access the DNS service on srv1.
Thanks for the consistent videos. I just had a small doubt. When we are asked to create one rule to include both the PCs, how did you determine the IP address of 10.10.2.0 and Wildcard mask of 0.0.1.255 respectively. Thank you!!
Hi, what time in the video?
@@JeremysITLab 15:40
I have the same question as Yash
happy new year to everyone
i have a question
from what i can see, the ip access-list resequence command is not working in packet tracer
am i right?
Not sure, I haven't tried it in packet tracer. But there are many commands that aren't available in packet tracer, so perhaps 'ip acecss-list resequence' is one of them!
I just want to thank you for the great effort you did , the way your explaning its really amazing ,,, now i just finished your videos ,, and really excited to finish it , but i am really afraid to lose motivation unill you finsih it,, so i dont know what to do ,,any advice ?
also i have another question )) ,, i am working in communication company (transit company) which deal with voice over ip using SIP protocol ,, most of our work on cisco routers but i am still in the beginnrer level so i dont deal with the routers direct. thats why i am really intersted now to finish the CCNA..
my question is if you know any course related to SIP protocol. i just found SIP school certified associate but i never heared about this certificate , just need your opinion and advice
and for the CCNA course do you recomend cisco-ccna-gold-bootcamp-course from Neil Anderson or David Bombal
thank you in advance
Unfortunately it will be a while before I finish the course, so I think it's best to get another course and a book! For the book, I recommend the official cert guides (vol 1 and 2) by Wendell Odom, and for the course I like Neil Anderson's. I'm sure David Bombal's is great too, but I didn't use it myself.
Not really sure about SIP courses. I don't use it in my work and have never studied it.
I think I got this :) ACLs at least lol
by the way, youre originally from Canada right? I hear the "aboot" ;)
Haha yep, good ear! (or maybe my accent is stronger than I thought lol)
thanks for the course
i still have a doubt about how you decided to use the /23 prefix on 15:40
I don't know if you still need this.. But I think it's as below.
Write out PC2/PC3 IP in binary:
10.10.2.102 = 00001010.00001010.00000010.01100110
10.10.3.103 = 00001010.00001010.00000011.01100111
First 23bits are the same. Rewrite the subnet mask /23.
11111111.11111111.11111110.00000000
Invert them to get the wildcard mask.
00000000.00000000.00000001.11111111 and you'll get 0.0.1.255
All the best with your CCNA!
5:09 Why arent we able to ping SRV2?
We blocked SRV1 for PC1 to access DNS service for SRV1 and not SRV2? Any insight?
Because SRV1 is the DNS server, so DNS doesn't work (PC1 can't learn SRV2's IP).
jeremy, one little doubt at 5:27
How PC1 is able to perform ARP process as the ARP request uses destination ip= FFFF-FFFF-FFFF which can't be routed between routers R1 and R2. then how PC1 is able to ping SRV2 succesfully??
@@JeremysITLab that means, as the PC1 will send an ARP request then in reply to that request the R1 will respond with its MAC in that ARP response and then PC1 will send that ping packet of SRV to R1(def. gateway) and later the R1 will use its routing table to forward the ping to SRV1. RIGHT???
i downloaded packet tracer files from your website but it is showing incompatible with current version
Is bosonnetsi, free software?
My files are all compatible with the current version. What version are you using?
NetSim isn't free, it's a product made by Boson Software.
Hi Jeremy, I have a question for you. I tried to experiment in the lab a bit and tried to deny DNS to server using the same commands from this lab but for SRV2. However, when I ping srv2, I get a ping back every time. I applied it to the ACL to g0/0 interface inbound.
R1(config)#ip access-list extended NEW
R1(config-ext-nacl)#deny udp 172.16.1.0 0.0.0.255 host 192.168.2.100 eq 53
R1(config-ext-nacl)#deny tcp 172.16.1.0 0.0.0.255 host 192.168.2.100 eq 53
R1(config-ext-nacl)#permit ip any any
R1(config-ext-nacl)#int g0/0
R1(config-if)#ip access-group NEW in
ah, I see now. You configured DNS for both Srv1 and Srv2. My mistake. Thanks again for the resources! This is very helpful in helping me understand the concept
for 1 line extended numbered acl we dont need to use ip at the begining of the command? I have tried using multiline command without using ip that wont work.
Sorry, I don't understand the question. Are you asking about 1 line or multiline?
@@JeremysITLab hi Jeremy
In Odom's book p63 have extended (num) acl cmd , those are 1 line (I mean everything covered in 1 line) . e.g.
access-list 101 permit tcp host 10.1.1.1 10.1.2.0 0.0.0.255 eq www
The command is like that.
hey jeremi thank for your videos if i join the chanel what I get ?
Click the 'join' button under the video, it says what you get.
Hi Jeremy ,,,
just want to know if the course on your website is complete or not and if not how long will it take you to complete it ?
Nope, many more videos to come. I'll finish it this year.
I need to pass my exam. i want to prepare myself with your courses. After all this, Can you help me to aply to a plateform fir the ccna test?
Do a Google search for 'Pearson VUE Cisco', you can apply for the exam there :)
@@JeremysITLab Thank you !
I know you have already posted the progress a while back. But what's the present progress, what do u think how much percentage have we completed so far?
It's probably about 70% complete at the moment.
Thanks for everything and your effort too. . .
Btw Happy New Year 😺 Jeremy.... Have a great year ahead.....😃👍
thank you a lot I have written to you before and again I'm saying that we don't know how to thank you sir you are the best in my networking career
I just wanna ask you to advise me and tell me the name of the best programming language for networking
just give me the name, please
java or python or which one do you recommend is the best??
I have been confused about this question a lot
thanks for everything
For networking, Python 100%!
Thank you so much bro 💚💛🧡💙❤️
How many more videos will be there to complete course?
The course is about 70% complete
Hello thank you very much I want to ask about where I can take online classes and have the certification of CCNA 1 2 3 and 4 please thank you
There is only one CCNA certification, not 4
How i can have it online please thank you for your answer
When will the course will complete??
Any estimated date??
Probably the first half of this year!
Sir, i have one problem to solve ...there is one switch in school and that switch is working fine its a 24 port switch but when i replaced with 16 port switch it was not working and even light was glowing do i need to configure ..so what are the measure steps should i take to resolve ... This is a real world problem when i learn your lecture it seems easy but when real world problem comes its really difficult to understand ...so while placing new switch what r the things we need to know
🔰 It’s not remotely fair to ask Jeremy to troubleshoot a device for you; A device he has no access to, has no direct connection, no model #, IOS level, situational background, etc...
> Have you searched the internet for information on your replacement switch❓
> Have you backed up and reviewed the old switches configuration❓
> Have you made sure your cables or correct❓
> Have you gone into the new switches configuration and looked at how it’s configured❓
> Have you referred to the new switches manual❓
> Have you looked at the new switches manufacturer website knowledge base❓
These are the things that your expected to do as a competent network technician
Thanks @CiscoLadder for helping out! Yeah, I can't really help out with questions like this, I need more info than can be easily conveyed over TH-cam comments.
is there a free open source alternative to netsim?
Packet Tracer is the only free alternative.
🔰 Hiya Jeremy,
I think I’ve asked this before but...I don’t see any ‘JOIN’ button i.e. as I do in other content provider channels...
Is it something particular to an iPhone not seeing it❓ I know what it looks like, it’s a blue ‘JOIN’ button, but I never see it under any of your superb videos...
I’d like to join...as I’m a loyal follower and I always recommend you to other CCNA candidates...
Best Regards,
Dave - CiscoLadder
Hi Dave! Thanks so much for offering your support. In the iPhone app it should be right next to the subscribe button, I can see it on my videos. If you can't see it, I have no idea what the problem could be. Maybe check it out on PC?
how many videos left ?
The course is about 70% complete
How many videos still left to upload
I think he said there will be about 50 total.
Yeah about 50 days to 60 days in total, we'll see.
@@JeremysITLab there are two sections of ur videos other one is full of practical is it for new CCNA and is there any other video still left to upload there also.
🇵🇭🇵🇭🇵🇭
Thanks for watching!
Why /23 ?
I don't know if you still need this.. But I think it's as below.
Write out PC2/PC3 IP in binary:
10.10.2.102 = 00001010.00001010.00000010.01100110
10.10.3.103 = 00001010.00001010.00000011.01100111
First 23bits are the same. Rewrite the subnet mask /23.
11111111.11111111.11111110.00000000
Invert them to get the wildcard mask.
00000000.00000000.00000001.11111111 and you'll get 0.0.1.255
this lab is very helpful to understand extended ACL, very good, thank Jeremy very much for the hard work.
how many videos left ?
The course is about 70% complete