CCNA: ACL Placement – Std Near Dest, Ext Near Source

Bundle lab · $29.99

Dual-router Branch/HQ lab with a branch client and an HQ server. You will apply an extended IPv4 ACL inbound near the source on the Branch LAN to block specific traffic (TCP/80) while permitting others (ICMP), and a standard IPv4 ACL outbound near the destination on the HQ LAN to admit only the approved source. Validate from real hosts, confirm ACL hitcounts, and keep inter-site connectivity via static routes over a /30 transit.

Learning objectives

• Implement a standard ACL near the destination (outbound on the HQ LAN interface) to avoid over-blocking.
• Implement an extended ACL near the source (inbound on the Branch LAN interface) to filter specific protocols precisely.
• Verify permitted and denied traffic end-to-end from the client to the server and confirm ACL hitcounts.
• Configure correct static routing with /30 transit addressing and neighbor next-hops.

Troubleshooting focus

• Verify every link's interface status and IP addressing (`show ip interface brief`) and correct any interface that is down or misaddressed.
• Confirm each device's running configuration matches the lab objective, and bring any interface, route, or service that is not in its expected state back to health.
• Trace end-to-end reachability with ping/traceroute and isolate the first hop where forwarding fails.