Free CCNA | Extended ACLs | Day 35 Lab | CCNA 200-301 Complete Course

Рет қаралды 59,335

Күн бұрын

Free CCNA 200-301 flashcards/Packet Tracer labs for the course: jitl.jp/ccna-files
📖 My CCNA Book: Vol 1: jitl.jp/book1-yt Vol 2: jitl.jp/book2-yt
📚Boson ExSim: jitl.jp/ccna-exsim ← the BEST practice exams for CCNA
💻Boson NetSim: jitl.jp/ccna-netsim ← 100+ detailed guided labs for CCNA
💯ExSim + NetSim: jitl.jp/ccna-kit ← get BOTH for a discount!
🥇CCNA Gold Bootcamp: www.flackbox.com/cisco-ccna-c... ← the course I used to get my CCNA (top rated course on the Internet)
Get the course ad-free with bonus quizzes and more on JITL Academy: courses.jeremysitlab.com
Download Packet Tracer: www.netacad.com/courses/packe...
In this lab for day 35 of my free CCNA 200-31 complete course, you will practice configuring extended IPv4 ACLs (Access Control Lists).
In this FREE and COMPLETE CCNA 200-301 course you will find lecture videos covering all topics in Cisco official exam topics list, end-of-video quizzes to test your knowledge, flashcards to review, and practice labs to get hands-on experience.
SUPPORT MY CHANNEL
The best way to support my channel is to like, comment, subscribe, and share my videos to help spread the word!
If you can spare to leave a tip, here are some options:
PayPal: paypal.me/jeremysitlabYT
BAT (Basic Attention Token) tips in the Brave browser (www.jeremysitlab.com/brave-br...)
======================
Patreon: / jeremysitlab
======================
Cryptocurrency Addresses
Bitcoin: bc1qxjpza7nx46e8a2rtz6vkcrvxx9mfjnufdrk0jv
Ethereum: 0x08B4325b1B99B05d850A3bfCd4A6620D770cfB64
======================
0:00 Introduction
0:59 Step 1
9:10 Boson NetSim
#cisco #CCNA

Пікірлер: 143

@joseph6215 5 күн бұрын

If any of you are stuck, remember applying the ACL to an interface is case sensitive, maybe Jeremy mentioned that but it got me this video!

@mrbanaly Жыл бұрын

I am practicing your labs and then validating with your videos. I feel like I am accomplished a significant progress on the CCNA material. THANK U VERY MUCH!!

@takatoekoe Ай бұрын

do you have your CCNA by now?

@iamsteezze 3 жыл бұрын

Thanks for all you do for the community. Your effort is not going unnoticed

@JeremysITLab 3 жыл бұрын

Thanks, I appreciate it :)

@SAMSAM-up5nd Жыл бұрын

this lab is very helpful to understand extended ACL, very good, thank Jeremy very much for the hard work.

@samirsamir7779 3 жыл бұрын

Hello Jeremy + Happy new year !!! thank you for your awesome courses about CCNA . All the Best..

@JeremysITLab 3 жыл бұрын

Thanks, happy new year!

@Reason_over_Dogma 2 жыл бұрын

Thanks for the video. I put it on each interface of R1. I had it going out of s0/0/0 inbound but this is much cleaner.

@spectrumanalyzer3093 Жыл бұрын

Once again, a superb video. Really great detail and very useful examples and quiz questions.

@NetworkingwithHamza Ай бұрын

I forgot permit ip any any on R1 g0/0 so my pings were failing even when I was using ip address of svr 2 to ping, and I was wondering why is it pinging for you in your video and failing in my lab. I figured it out.

@Alberto.81 3 жыл бұрын

Thank you jeremy for another great video. Looking forward for more!

@JeremysITLab 3 жыл бұрын

Thanks Alberto!

@ross9188 3 жыл бұрын

Really good work Jeremy, much appreciated! Your videos in conjunction with ITproTV has put me on a really good track :)

@JeremysITLab 3 жыл бұрын

Thanks Ross :)

@MosesRms 3 жыл бұрын

you have realy been doing a great job and you know how to bring up the lessons, bunch of thanks

@JeremysITLab 3 жыл бұрын

Thank you, glad you like it :)

@vauxhallchevette5858 3 жыл бұрын

Happy new year Jeremy. I hope you will finish this course soon and start another one.

@JeremysITLab 3 жыл бұрын

Thanks, happy new year!

@paulroberts8542 2 жыл бұрын

As a suggestion - an alternative way to show that DNS is blocked is to use the 'nslookup' command from the PC. That way, you don't need to know the host names that the DNS server has configured.

@iamjoycheee 10 ай бұрын

Thank you sir! I got stuck on the wildcard mask block used in 15:40 which means my subnetting knowledge is not yet that strong:( . I know you mentioned regarding this on the lecture vid but i need to practice more. Once again sir thank you very much.

@konefine3626 3 жыл бұрын

Always great video with a perfect explanation thank you Jeremy

@JeremysITLab 3 жыл бұрын

Thanks Kone!

@nicholassattaur9964 3 жыл бұрын

Great video Jeremy, loved the topic! Thank you

@JeremysITLab 3 жыл бұрын

Thanks Nicholas :)

@vhomotlatsi486 2 ай бұрын

Very helpful. Thank you, Jeremy.

@abelornet9017 2 жыл бұрын

Thank you so much. it's easy to understand

@Madmark50484 Жыл бұрын

After a Monmouth 2 1/2 days and 15 of your days of lessons. I’ve realised not going to be able to complete the course in a week as I planned. I calculate I would be 7 of your days short. Still going to push through and learn it but at a milder pace. When I’m off in March maybe then I can go mad and finish it.

@hotmail4823620 Жыл бұрын

We must atleast like and subscriber to thank Jeremy for the intelligent and hardwork he has done

@VeryBigBang13 3 жыл бұрын

Awesome video, as always ! I spent way too much time trying to pick an appropriate name for my ACLs... i hate myself for that 😂

@JeremysITLab 3 жыл бұрын

Better than totally random names that don't help at all! ;)

@HemanthJabalpuri Жыл бұрын

Your lab is great as usual. But today's Boson lab is very interesting.

@LeeDowney Ай бұрын

The ACL name mode is case sensitive!!! Just FYI incase you can't figure out why yours isn't working! 🙂

@MiguelHernandez-zd7kr 3 жыл бұрын

Great lab! thank you once again

@JeremysITLab 3 жыл бұрын

Thanks Miguel!

@user-wc7cx9dh7z 3 жыл бұрын

greetings jermey , keep up the good work

@JeremysITLab 3 жыл бұрын

Thanks :)

@youssefsalama663 3 жыл бұрын

You are the best! Thanks!!!

@JeremysITLab 3 жыл бұрын

Thanks Youssef :)

@Moss2323 3 жыл бұрын

Great job

@obwizy 3 жыл бұрын

oh no, I have caught up. looking forward to more videos.

@JeremysITLab 3 жыл бұрын

Glad you like the videos :) Next one coming in about an hour!

@rayyanshaikh3442 3 жыл бұрын

good work sir jeremy appreciated

@JeremysITLab 3 жыл бұрын

Thank you :)

@mg7670 Ай бұрын

Thanks!

@DevOpsPulse 3 жыл бұрын

thank you thank you

@benoitwaziri2004 Жыл бұрын

very good merci bcp

@nedatuaconta2431 9 ай бұрын

tysm

@maksudmuzaffarov665 Жыл бұрын

HOnestly, I wanted smash more like buttons, UNfortunately, i am not able. Amazing content, thank you Jeremy

@Ahmed-TOUMI Жыл бұрын

Hi Jeremy, many thanks for your awesome courses, I wan just to ask you if I can use "permit IP host 10.0.1.1 host 10.0.2.1 eq 80" command in place of "permit TCP host 10.0.1.1 host 10.0.2.1 eq 80" that means using "IP" and no "TCP" in the first ACE

@pieleanumihai928 5 ай бұрын

thanks

@olaniyi0 6 ай бұрын

Day 35, I can't afford the exam... However, I'm learning and improving my networking knowledge... Thank you Jeremy

@hanimazen5717 2 жыл бұрын

Thank you jeremy for sharing your knowledge with us i hope people reward/support you for your hard work. Quick question CCNA 200-301 exam has no labs in it just multiple choices is that correct ? Thanks

@mohammedimranali8477 3 жыл бұрын

Thanks a billion times for your videos. Can you please let me know when WIFI SDN & NETWORK PROGRAMABILITY STARTS PLEASE UPDATE THANKS

@JeremysITLab 3 жыл бұрын

I'll cover them at the end of the course

@Alex-jh8pj 3 жыл бұрын

Hello Jeremy, your course about CCNA is the best in the internet. and the flashcards are extremely helpful. Thank you for that all. I have a question about boson ExSim, Is the access lifetime or is the access limited? sorry if you already mentioned it. my english is not good.

@JeremysITLab 3 жыл бұрын

Access is lifetime! :)

@faridgulum1226 Жыл бұрын

You merged 1st and 3nd one into ACL-id 101. What if I create another ACL for the 3rd requirement ? 100 and 101 for the first 2 requirements and 102 for the third one where we have to block http/s traffic.

@FuryRushBe 3 жыл бұрын

спасибо большое

@JeremysITLab 3 жыл бұрын

Thanks for watching ;)

@NathanAlpern Жыл бұрын

Hi. if you apply the deny ip for pc1 you could still ping pcq because its ICMP. am i correct?

@pissedputin7738 3 жыл бұрын

If you double click on the devices in Boson, it would open the console. Rather than clicking once on the device and then the "console" button.

@JeremysITLab 3 жыл бұрын

Thanks for the tip 👍

@Abiymokve 3 жыл бұрын

Thank you very much for the courses .how many courses are there to finish? at least as an estimate

@JeremysITLab 3 жыл бұрын

The course is about 70% complete I think

@zarados2 2 жыл бұрын

Hello Jeremy great video as always! Thank you for creating such a comprehensive video on CCNA. I just want to ask how did you decide to use a /23 prefix on 15:50. Can't a /24 prefix be used on this scenario since they both have a /24 prefix? Thank you!

@JeremysITLab 2 жыл бұрын

You could use /24, but then you'd need to use two permit statements, one for each /24 network.

@zarados2 2 жыл бұрын

@@JeremysITLab Thank you for answering! This will surely help me in my learnings.

@Idea3655. 3 жыл бұрын

hello sir i have some problem if try dns like ping pc1 then say -----Ping request could not find host pc3. Please check the name and try again.---- whats that mean still i didn't config any acl

@fragiskosbatis 3 жыл бұрын

happy new year to everyone i have a question from what i can see, the ip access-list resequence command is not working in packet tracer am i right?

@JeremysITLab 3 жыл бұрын

Not sure, I haven't tried it in packet tracer. But there are many commands that aren't available in packet tracer, so perhaps 'ip acecss-list resequence' is one of them!

@ipada95 Жыл бұрын

Is it an error on CCNA to create 2 different ACLs for request 1 and 3?

@tejas3968 3 жыл бұрын

Hello Sir, Your videos are easy to understand and fun to learn. Is this course enough to pass the official CCNA exam? Thanks for your efforts to teach us! It means a lot

@JeremysITLab 3 жыл бұрын

Hello! The course isn't complete at the moment, so it won't be enough. I recommend reading the official cert guides by Wendell Odom to fill in the gaps.

@rohailbukhari2687 3 жыл бұрын

@5:04 why is it that when u configured acl to deny traffic to SRV1 from 172.16.1.0/24, you decided to ping SRV2 instead? and y did it affect SRV2 when we only denied traffic to SRV1?

@JeremysITLab 3 жыл бұрын

I pinged srv2 by host name to test if PC1 is able to access the DNS service on host 1. It couldn't ping srv2 by host name, meaning it couldn't access the DNS service on srv1.

@TiTo_SPB 3 жыл бұрын

I just want to thank you for the great effort you did , the way your explaning its really amazing ,,, now i just finished your videos ,, and really excited to finish it , but i am really afraid to lose motivation unill you finsih it,, so i dont know what to do ,,any advice ? also i have another question )) ,, i am working in communication company (transit company) which deal with voice over ip using SIP protocol ,, most of our work on cisco routers but i am still in the beginnrer level so i dont deal with the routers direct. thats why i am really intersted now to finish the CCNA.. my question is if you know any course related to SIP protocol. i just found SIP school certified associate but i never heared about this certificate , just need your opinion and advice and for the CCNA course do you recomend cisco-ccna-gold-bootcamp-course from Neil Anderson or David Bombal thank you in advance

@JeremysITLab 3 жыл бұрын

Unfortunately it will be a while before I finish the course, so I think it's best to get another course and a book! For the book, I recommend the official cert guides (vol 1 and 2) by Wendell Odom, and for the course I like Neil Anderson's. I'm sure David Bombal's is great too, but I didn't use it myself. Not really sure about SIP courses. I don't use it in my work and have never studied it.

@VladimirGKovalev 2 ай бұрын

For DNS service first I tried an inverse logic, to permit all tcp/udp traffic from 172.16.1.0/24 to SRV1 except port 53 in SRV1. Here is the excerpt from PT's CLI: Extended IP access list 105 5 permit udp 172.16.1.0 0.0.0.255 host 192.168.1.100 neq domain 10 permit tcp 172.16.1.0 0.0.0.255 host 192.168.1.100 neq domain 15 permit ip any any ACL 105 was applied same way to R1's G0/0 inbound. However this solution doesn't work and I cannot understand why?

@sumitsingh-ys6ew 3 жыл бұрын

jeremy, one little doubt at 5:27 How PC1 is able to perform ARP process as the ARP request uses destination ip= FFFF-FFFF-FFFF which can't be routed between routers R1 and R2. then how PC1 is able to ping SRV2 succesfully??

@sumitsingh-ys6ew 3 жыл бұрын

@@JeremysITLab that means, as the PC1 will send an ARP request then in reply to that request the R1 will respond with its MAC in that ARP response and then PC1 will send that ping packet of SRV to R1(def. gateway) and later the R1 will use its routing table to forward the ping to SRV1. RIGHT???

@onewaydrive_ 3 жыл бұрын

I think I got this :) ACLs at least lol by the way, youre originally from Canada right? I hear the "aboot" ;)

@JeremysITLab 3 жыл бұрын

Haha yep, good ear! (or maybe my accent is stronger than I thought lol)

@yashchellani5855 3 жыл бұрын

Thanks for the consistent videos. I just had a small doubt. When we are asked to create one rule to include both the PCs, how did you determine the IP address of 10.10.2.0 and Wildcard mask of 0.0.1.255 respectively. Thank you!!

@JeremysITLab 3 жыл бұрын

Hi, what time in the video?

@yashchellani5855 3 жыл бұрын

@@JeremysITLab 15:40

@gerryvalenzuela9158 3 жыл бұрын

I have the same question as Yash

@Zlarg 4 ай бұрын

Are there any benefits to making seperate entries in the ACL for blocking TCP & UDP connections to the DNS service, instead of just denying "IP"? UPDATE: after testing I can answer my own question haha. Denying IP wil block all IP traffic without allowing a specific port/service to be configured. So if you want to target specific ports/services, you will need to use TCP or UDP in the command.

@yoriichiT 5 ай бұрын

thanks for the course i still have a doubt about how you decided to use the /23 prefix on 15:40

@desmondchung1395 4 ай бұрын

I don't know if you still need this.. But I think it's as below. Write out PC2/PC3 IP in binary: 10.10.2.102 = 00001010.00001010.00000010.01100110 10.10.3.103 = 00001010.00001010.00000011.01100111 First 23bits are the same. Rewrite the subnet mask /23. 11111111.11111111.11111110.00000000 Invert them to get the wildcard mask. 00000000.00000000.00000001.11111111 and you'll get 0.0.1.255 All the best with your CCNA!

@utshav_b7312 Жыл бұрын

5:09 Why arent we able to ping SRV2? We blocked SRV1 for PC1 to access DNS service for SRV1 and not SRV2? Any insight?

@JeremysITLab Жыл бұрын

Because SRV1 is the DNS server, so DNS doesn't work (PC1 can't learn SRV2's IP).

@juliocesarmoreno9272 3 жыл бұрын

hey jeremi thank for your videos if i join the chanel what I get ?

@JeremysITLab 3 жыл бұрын

Click the 'join' button under the video, it says what you get.

@deepbaban6864 3 жыл бұрын

How many more videos will be there to complete course?

@JeremysITLab 3 жыл бұрын

The course is about 70% complete

@pelisclips3153 2 жыл бұрын

Hi Jeremy, I have a question for you. I tried to experiment in the lab a bit and tried to deny DNS to server using the same commands from this lab but for SRV2. However, when I ping srv2, I get a ping back every time. I applied it to the ACL to g0/0 interface inbound. R1(config)#ip access-list extended NEW R1(config-ext-nacl)#deny udp 172.16.1.0 0.0.0.255 host 192.168.2.100 eq 53 R1(config-ext-nacl)#deny tcp 172.16.1.0 0.0.0.255 host 192.168.2.100 eq 53 R1(config-ext-nacl)#permit ip any any R1(config-ext-nacl)#int g0/0 R1(config-if)#ip access-group NEW in

@pelisclips3153 2 жыл бұрын

ah, I see now. You configured DNS for both Srv1 and Srv2. My mistake. Thanks again for the resources! This is very helpful in helping me understand the concept

@worldofhind623 3 жыл бұрын

Hello thank you very much I want to ask about where I can take online classes and have the certification of CCNA 1 2 3 and 4 please thank you

@JeremysITLab 3 жыл бұрын

There is only one CCNA certification, not 4

@worldofhind623 3 жыл бұрын

How i can have it online please thank you for your answer

@TiTo_SPB 3 жыл бұрын

Hi Jeremy ,,, just want to know if the course on your website is complete or not and if not how long will it take you to complete it ?

@JeremysITLab 3 жыл бұрын

Nope, many more videos to come. I'll finish it this year.

@prathameshgaikwad9281 3 жыл бұрын

i downloaded packet tracer files from your website but it is showing incompatible with current version Is bosonnetsi, free software?

@JeremysITLab 3 жыл бұрын

My files are all compatible with the current version. What version are you using? NetSim isn't free, it's a product made by Boson Software.

@susmitamazumder8390 3 жыл бұрын

for 1 line extended numbered acl we dont need to use ip at the begining of the command? I have tried using multiline command without using ip that wont work.

@JeremysITLab 3 жыл бұрын

Sorry, I don't understand the question. Are you asking about 1 line or multiline?

@susmitamazumder8390 3 жыл бұрын

@@JeremysITLab hi Jeremy In Odom's book p63 have extended (num) acl cmd , those are 1 line (I mean everything covered in 1 line) . e.g. access-list 101 permit tcp host 10.1.1.1 10.1.2.0 0.0.0.255 eq www The command is like that.

@jacquepackage7920 14 күн бұрын

What is a simple way of remembering if the rule should be inbound or outbound? its the only thing getting me mixed up with ACLs

@yawziddah849 11 күн бұрын

If you're using standard ACL use outbound on the destination interface and if using Extended ACL use inbound on the source ACL.. This tip might help

@jacquepackage7920 10 күн бұрын

@@yawziddah849thank you! I’ll keep that in mind.

@NabigaRenson 3 жыл бұрын

I need to pass my exam. i want to prepare myself with your courses. After all this, Can you help me to aply to a plateform fir the ccna test?

@JeremysITLab 3 жыл бұрын

Do a Google search for 'Pearson VUE Cisco', you can apply for the exam there :)

@NabigaRenson 3 жыл бұрын

@@JeremysITLab Thank you !

@rekharanibehera8130 3 жыл бұрын

I know you have already posted the progress a while back. But what's the present progress, what do u think how much percentage have we completed so far?

@JeremysITLab 3 жыл бұрын

It's probably about 70% complete at the moment.

@rekharanibehera8130 3 жыл бұрын

Thanks for everything and your effort too. . .

@rekharanibehera8130 3 жыл бұрын

Btw Happy New Year 😺 Jeremy.... Have a great year ahead.....😃👍

@vikashranjan1216 3 жыл бұрын

When will the course will complete?? Any estimated date??

@JeremysITLab 3 жыл бұрын

Probably the first half of this year!

@twanaahmedbrno6204 3 жыл бұрын

thank you a lot I have written to you before and again I'm saying that we don't know how to thank you sir you are the best in my networking career I just wanna ask you to advise me and tell me the name of the best programming language for networking just give me the name, please java or python or which one do you recommend is the best?? I have been confused about this question a lot thanks for everything

@JeremysITLab 3 жыл бұрын

For networking, Python 100%!

@twanaahmedbrno6204 3 жыл бұрын

Thank you so much bro 💚💛🧡💙❤️

@sujoenilshahi9715 3 жыл бұрын

Sir, i have one problem to solve ...there is one switch in school and that switch is working fine its a 24 port switch but when i replaced with 16 port switch it was not working and even light was glowing do i need to configure ..so what are the measure steps should i take to resolve ... This is a real world problem when i learn your lecture it seems easy but when real world problem comes its really difficult to understand ...so while placing new switch what r the things we need to know

@65gtotrips 3 жыл бұрын

🔰 It’s not remotely fair to ask Jeremy to troubleshoot a device for you; A device he has no access to, has no direct connection, no model #, IOS level, situational background, etc... > Have you searched the internet for information on your replacement switch❓ > Have you backed up and reviewed the old switches configuration❓ > Have you made sure your cables or correct❓ > Have you gone into the new switches configuration and looked at how it’s configured❓ > Have you referred to the new switches manual❓ > Have you looked at the new switches manufacturer website knowledge base❓ These are the things that your expected to do as a competent network technician

@JeremysITLab 3 жыл бұрын

Thanks @CiscoLadder for helping out! Yeah, I can't really help out with questions like this, I need more info than can be easily conveyed over KZfaq comments.

@markganus1085 Жыл бұрын

is there a free open source alternative to netsim?

@JeremysITLab Жыл бұрын

Packet Tracer is the only free alternative.

@65gtotrips 3 жыл бұрын

🔰 Hiya Jeremy, I think I’ve asked this before but...I don’t see any ‘JOIN’ button i.e. as I do in other content provider channels... Is it something particular to an iPhone not seeing it❓ I know what it looks like, it’s a blue ‘JOIN’ button, but I never see it under any of your superb videos... I’d like to join...as I’m a loyal follower and I always recommend you to other CCNA candidates... Best Regards, Dave - CiscoLadder

@JeremysITLab 3 жыл бұрын

Hi Dave! Thanks so much for offering your support. In the iPhone app it should be right next to the subscribe button, I can see it on my videos. If you can't see it, I have no idea what the problem could be. Maybe check it out on PC?

@al-tahirali2753 3 жыл бұрын

how many videos left ?

@JeremysITLab 3 жыл бұрын

The course is about 70% complete

@modassirjamal5378 3 жыл бұрын

How many videos still left to upload

@cloaksorg 3 жыл бұрын

I think he said there will be about 50 total.

@JeremysITLab 3 жыл бұрын

Yeah about 50 days to 60 days in total, we'll see.

@modassirjamal5378 3 жыл бұрын

@@JeremysITLab there are two sections of ur videos other one is full of practical is it for new CCNA and is there any other video still left to upload there also.

@SergioValenzuela-bo1ig 6 ай бұрын

Why /23 ?

@desmondchung1395 4 ай бұрын