+- How2pass.com Forums (https://www.how2pass.com/forum)
+-- Forum: CCNA (https://www.how2pass.com/forum/forum-4.html)
+--- Forum: Answer this question (https://www.how2pass.com/forum/forum-11.html)
+--- Thread: QID:S19 & S17 Broken?? (/thread-534.html)
QID:S19 & S17 Broken?? - sptmaster - 02-04-2011
I've had this question several times and I always get it wrong. Just now I've tried doing it 3 times individually and I got marked wrong all times.
I checked all the cable types and ip addresses correct, and I even did "enable password" correctly instead of secret. Everything I've entered (did copy run start also) looks the SAME as the explanation!!!
Anyone else having problems with this one?
I also just got done doing S17 and got marked wrong... I did it again even using the number 101 for my access list and got marked wrong again a second time......
access-list 101 permit tcp host PCIP host SERVERIP eq 80
access-list 101 deny tcp any host SERVERIP eq 80
access-list 101 permit ip any any
int fa0/0 (interface the server is on)
ip access-group 101 out
Did copy run start also, and I've checked my answers against the explanations and they are IDENTICAL. What gives with these sims???
Re: QID:S19 & S17 Broken?? - forumsupport - 02-05-2011
Take a screen capture after entering your commands and send to our support address. You will be told what was missing.
Re: QID:S19 & S17 Broken?? - Djmillymil - 04-01-2011
Yea I'm getting the same thing.
Correct me if I'm wrong but extended ACLs should be placed closest to the source, so it should be applied in Fa0/1 going out.
There is even something in the answer that leads me to think that this SIM is a little messed up...on Step 3.
Re: QID:S19 & S17 Broken?? - forumsupport - 04-06-2011
(04-01-2011, 02:18 AM)Djmillymil link Wrote:Yea I'm getting the same thing.
Correct me if I'm wrong but extended ACLs should be placed closest to the source, so it should be applied in Fa0/1 going out.
There is even something in the answer that leads me to think that this SIM is a little messed up...on Step 3.
It is a general rule but not always true. In this case if you apply it to the Fa0/1 going out, how can it filter traffic coming from the Core network (S0/1) and leaving towards Servers LAN (F0/0). The out direction even cannot filter the traffic originating from other PCs in the Hosts LAN destined for Stock Web Server. Even the "in" direction on F0/1 is not fulfilling the requirement of checking the traffic from the Core network to the Stock Web Server.
Please read your books for clear understanding of ACL directions and their effects.
Re: QID:S19 & S17 Broken?? - Djmillymil - 04-13-2011
Thanks for the tip, looks like I read the question a little wrong as well (missed that it had to block Core too)
Sorry to have ever disturbed you.
Re: QID:S19 & S17 Broken?? - jamez64 - 04-22-2011
I just ran across this trying to find clarification on how to apply the ACL to FA0/0 for question S17. Why is the ACL applied going "out" the interface? Shouldn't it applied going "in" since Extended ACL's are suppose to placed as close as possible to he source.
Re: QID:S19 & S17 Broken?? - tomMike - 05-17-2011
It is a general rule but not always true.
RE: QID:S19 & S17 Broken?? - mentalfloss - 10-04-2019
I am copying line for line from the answer and it is still being marked as wrong. OUI!
RE: QID:S19 & S17 Broken?? - forumsupport - 10-05-2019
Send screen captures of your commands for all steps to our support email address. Take a screen shot when one page of configuration is complete.
Also make sure to press the "Done" button, located at the bottom-left area of every sim, once your complete your config, to get your answer evaluated.
RE: QID:S19 & S17 Broken?? - mentalfloss - 10-05-2019
(10-05-2019, 04:19 PM)forumsupport Wrote: Send screen captures of your commands for all steps to our support email address. Take a screen shot when one page of configuration is complete.
Also make sure to press the "Done" button, located at the bottom-left area of every sim, once your complete your config, to get your answer evaluated.
Thank you for your reply. I wasn't clicking the Done button. All good now.