Cisco · hands-on lab

CCNA 09 — Access control lists (ACLs)

Filter traffic with a standard and an extended ACL, apply it in the right direction, and read the hit counts.

Create an account to start Use or ask for a voucher

55 minutesTime in the lab
AdvancedLevel
5 tasksChecked automatically
CertificateVerifiable link when you finish

The situation

Only the Sales LAN may reach the server, and only for web — block everything else.

Build this in Packet Tracer

Drag 1 router → R1, 2 switches or use PCs directly, 2 PCs → PC1 (Sales), PC2 (Guest), 1 Server → SRV.
Connect PC1 and PC2 on separate router LAN interfaces (Gi0/0, Gi0/1) and SRV on Gi0/2; address each /24.

What you will do

Write a standard ACL
Apply it near the destination
Write an extended ACL for web only
Check hits
Direction & placementquestion

How it works

The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.