In the second ACE shown in the following example, port 400 was incorrectly specified instead of port 443. What is the best way to correct this error?
R1# show access-lists Extended IP access list SURFING 10 permit tcp 192.168.10.0 0.0.0.255 any eq www 20 permit tcp 192.168.10.0 0.0.0.255 any eq 400 R1#
- Copy the ACL into a text editor, correct the ACE, and recopy the ACE to the router.
- Create a new named ACL and apply it to the router interface.
- Enter permit tcp 192.168.10.0 0.0.0.255 any eq 443.
- Enter the no 20 keyword, and then enter permit tcp 192.168.10.0 0.0.0.255 any eq 443.
- Remove the entire ACL and then re-create it with the correct ACE.
Explanation: You can use the ip access-list command to edit an existing numbered or named ACL. The ACL ACEs can be removed using the no command followed by the sequence number.
Exam with this question: 5.5.4 Module Quiz - ACLs for IPv4 Configuration
Please login or Register to submit your answer