Cisco IOS Access Lists

Features

• Cover Type: Paperback with 272 pages
• Published by: O'Reilly Media, Inc. June 7, 2001
• Written in: English
• ISBN 10 Number: 1565923855
• ISBN 13 Number: 978-1565923850
• Book Dimensions: 9.1 x 6.9 x 0.7 inches
• Weighs: 15.2 ounces

Product Review
Cisco IOS Access Lists takes a methodical approach to access lists and their capabilities, and is ideal for administrators of Cisco equipment who have configured access lists before but feel as if they're not taking full advantage of their capabilities (which, author Jeff Sedayao proves, extend well beyond security). Much of what Sedayao has written is of a "policy engineering" nature, is not strictly focused on Cisco's Internetwork Operating System (IOS), and has relevance to administrators of all sorts of access control equipment. There's emphasis on traffic minimization as well as security, as a section on using access lists to keep routing updates off stub networks exemplifies.

Like many books in the blue system-administration series, this one includes a lot of explanations of what each capability is for, and how each fits with other parts of the system. A lot of times, these sections include conceptual diagrams that show routes of communication and the desired access policies. Then come excerpts from real access lists (Sedayao focuses on IOS ten and later) and, often, commentary on what the interesting lines of the lists are doing. It's a great way to teach people who have the ability and desire to experiment. Engineers, after all, typically like to learn by doing. --David Wall

Topics covered: The capabilities and limitations of access lists under the Cisco Internetwork Operating System (IOS) and other similar routing and access-control environments. Access policies (with emphasis on packet filtering), routing policies (via route filtering and route maps), and the details of Border Gateway Protocol (BGP) pertaining to access lists are all covered.

Product Description
Cisco routers are used widely both on the Internet and in corporate intranets. At the same time, the Cisco Internet Operating System (IOS) has grown to be very large and complex, and Cisco documentation fills several volumes.

"Cisco IOS Access Lists" focuses on a critical aspect of the Cisco IOS--access lists. Access lists are central to the task of securing routers and networks, and administrators cannot implement access control policies or traffic routing policies without them. Access lists are used to specify both the targets of network policies and the policies themselves. They specify packet filtering for firewalls all over the Internet.

"Cisco IOS Access Lists" covers three critical areas:

Intranets. The book serves as an introduction and a reference for network engineers implementing routing policies within intranet networking.

Firewalls. The book is a supplement and companion reference to books such as Brent Chapman's "Building Internet Firewalls." Packet filtering is an integral part of many firewall architectures, and

"Cisco IOS Access Lists "describes common packet filtering tasks and provides a "bag of tricks" for firewall implementers.

The Internet. This book is also a guide to the complicated world of route maps. Route maps are an arcane BGP construct necessary to make high level routing work on the Internet.

"Cisco IOS Access Lists" differs from other Cisco router titles in that it focuses on practical instructions for setting router access policies. The details of interfaces and routing protocol settings are not discussed.

Reader Reviews
Nothing has become more important to computer networking than security, keeping out those things that are not need for the operations intended. O'Reilly Publishing has put together an excellent choice for administrators to help them ensuring that what needs to stay out stays out. Do not be fooled by the small size of the book or the fact that the book has only 250 pages, the manual is packed with information that is the key to creating and using access lists. Setting up security policies is just the beginning of the book and the very beginning to creating the access lists you'll need. From there you have a great breakdown of both standard and extended access lists. Policy writing for routing and security is the next topic discussed, the author makes sure that he has given more than enough information in each section. Troubleshooting Access lists is the next area followed up with IP Prefix lists, BGP Access lists, mapping for both interior and exterior lists. You'll also work with AS networks and there are appendices for both major port numbers and CIDR layouts. Also included is case studies to help you understand when, where and why to use access lists. Overall a very well done effort and a book that is making my job easier. Comment | | (Report this)