Computer Network Lab Work 10
Security of Access Control Lists
An Access Control List (ACL) is a list of permissions attached to an object. An ACL specifies which users or system processes are granted access to the object, as well as the operations permitted on that object. Each entry in a typical ACL specifies a subject and an operation.
Advantages of Using ACLs:
- Limits network access and improves network performance; for example, ACLs can block video traffic, reducing network load and enhancing overall performance.
- ACLs can block routing updates.
- Provides security for network access.
- Controls areas where clients can access the network.
- Regulates traffic flow. ACLs can block routing updates. If updates are unnecessary due to network conditions, bandwidth can be saved.
- Offers a security foundation for network access. For instance, host A may be denied access to the HR department network while host B is permitted.
- Determines which types of traffic are allowed or blocked through router interfaces. For example, email traffic is allowed, while Telnet traffic is blocked.
- Selects which hosts are allowed or denied access to network segments. For example, ACLs can permit or block FTP or HTTP traffic.
Benefits of Using ACLs:
- User-friendly.
- Specifically designed to analyze data and generate audit reports for non-technical users.
- Capable of handling unlimited file sizes.
- Able to read various data types.
- Can export results to multiple data formats.
- Produces high-quality reports.
MODULE
All articles on this blog are licensed under CC BY-NC-SA 4.0 unless otherwise stated.
Related Articles
2022-09-16
Computer Network Lab Work 1
Installation of Cisco Packet Tracer and Running Simple SimulationsCisco Packet Tracer is a program provided by Cisco Systems as a simulator for educational purposes, training, and research in computer network simulations. Packet Tracer cannot be used to model active networks, and this simulator also omits some commands that are used on the actual devices, specifically reducing commands found in Cisco IOS. MODULEDownload Module 1
2022-09-23
Computer Network Lab Work 2
Functions of DHCP, DNS, HTTP, FTP, and E-MAIL ServersA server is a provider of various types of data, documents, and other resources needed by clients. Clients require servers to connect within a network or to request data/files that are available on the server. MODULEDownload Module 2
2022-09-26
Computer Network Lab Work 3
Different Class NetworksA network is a collection of computers that are interconnected with or without cables, allowing them to communicate with each other by exchanging data. The purpose of a computer network is to enable more efficient management of resources, as well as to help maintain information in a reliable and up-to-date manner. Networks can also expedite the process of data sharing, facilitate more efficient communication within workgroups, and make efforts to serve clients more...
2022-10-02
Computer Network Lab Work 4
Virtual Local Area Network (VLAN)A Virtual LAN is a group of devices on one or more LANs that are configured (using management software) to communicate as if those devices were connected to the same physical network. A VLAN (virtual LAN) is a network model that logically divides a network into several different VLANs. VLANs are not limited by the physical conditions of the network, as they can be configured virtually without regard to the equipment’s physical setup. Therefore, VLANs offer...
2022-10-10
Computer Network Lab Work 5
Creating an Inter Virtual Local Area Network (VLAN)A Virtual LAN is a group of devices on one or more LANs that are configured (using management software) to communicate as if those devices were connected to the same path, even though they are actually on different LAN segments. For computers on different VLANs to connect, a layer 3 device, such as a router, is required. The router used for VLAN routing must be capable of trunking to the switch. Therefore, the router must have a Fast...
2022-10-17
Computer Network Lab Work 6
Creating a Static Router NetworkPacket Tracer is an application for learning and training, as well as for research in computer network simulation. This program was developed by Cisco Systems and is provided free of charge to faculty, students, and alumni who have participated in the Cisco Networking Academy. The primary goal of Packet Tracer is to provide tools for students and educators to understand the principles of computer networking and to build skills in using Cisco networking...
Comments
