ACL Wildcard Masks: Match Host, Subnet, and Range

Bundle lab · $29.99

Hands-on CCNA ACL practice using standard ACLs and wildcard masks to allow a single host, a contiguous range, and an entire subnet while proving a deny. You will place the ACL near the destination, order statements correctly, verify with end-host pings and ACL counters, and troubleshoot common mistakes.

Learning objectives

• Craft wildcard masks for a single host, a precise contiguous range, and a full subnet using standard ACL syntax.
• Place a standard ACL near the destination, applied in the correct direction, so it filters the intended routed flow.
• Order ACEs correctly so specific permits come before broader subnet denies to avoid shadowing.
• Verify ACL behavior using end-host pings and ACL hit counters on IOS.
• Troubleshoot wildcard math, ACL placement/direction, and statement order problems without breaking return traffic.

Troubleshooting focus

• Verify every link's interface status and IP addressing (`show ip interface brief`) and correct any interface that is down or misaddressed.
• Confirm each device's running configuration matches the lab objective, and bring any interface, route, or service that is not in its expected state back to health.
• Trace end-to-end reachability with ping/traceroute and isolate the first hop where forwarding fails.