Standard ACL: Permit Host & Subnet, Deny Others

Bundle lab · $29.99

Beginner CCNA ACL lab on a compact 5-node CML-Free topology. You will configure static routing end-to-end, implement source NAT (PAT) at the source edge, and then build a standard numbered ACL near the destination to allow a single NATed host and a specific subnet while denying all others. You will validate with pings from end hosts, observe ACL hit counters and NAT translations, and troubleshoot common mistakes such as ACL placement, wildcard masks, and pre-/post-NAT address matching.

Learning objectives

• Assign addressing to /24 LANs and /30 point-to-point links without overlap
• Configure static routes so LAN-to-LAN traffic forwards end-to-end
• Implement source NAT (PAT) on the source edge and verify translations
• Create a standard numbered ACL to permit one host and one subnet with implicit deny
• Apply the standard ACL near the destination in the correct direction so return traffic is not black-holed
• Validate access with pings from hosts and observe ACL hit counters and NAT translations
• Troubleshoot ACL placement, wildcard math, pre-/post-NAT matching, and mispointed static routes

Troubleshooting focus

• Verify every link's interface status and IP addressing (`show ip interface brief`) and correct any interface that is down or misaddressed.
• Confirm each device's running configuration matches the lab objective, and bring any interface, route, or service that is not in its expected state back to health.
• Trace end-to-end reachability with ping/traceroute and isolate the first hop where forwarding fails.