An ACL is applied inbound on a router interface. The ACL consists of a single entry:
access-list 210 permit tcp 172.18.20.0 0.0.0.31 172.18.20.32 0.0.0.31 eq ftp .
If a packet with a source address of 172.18.20.55, a destination address of 172.18.20.3, and a protocol of 21 is received on the interface, is the packet permitted or denied?
- permitted
- denied
Explanation: The packet is denied because it fails to match the criteria of the single permit entry, triggering the implicit deny. Specifically, the source address 172.18.20.55 falls outside the permitted range of 172.18.20.0 to 172.18.20.31 (defined by wildcard 0.0.0.31). Additionally, the destination address 172.18.20.3 does not match the permitted range of 172.18.20.32 to 172.18.20.63. In ACL processing, if a packet does not match any explicit permit statement, it is automatically discarded.
Related exam: Switching, Routing, and Wireless Essentials (Version 7.00) - SRWE Final Exam
