Cisco IOS Access Lists (Paperback)

~ (Author)

Editorial Reviews

Amazon.com Review

Cisco IOS Access Lists takes a methodical approach to access lists and their capabilities, and is ideal for administrators of Cisco equipment who have configured access lists before but feel as if they're not taking full advantage of their capabilities (which, author Jeff Sedayao proves, extend well beyond security). Much of what Sedayao has written is of a "policy engineering" nature, is not strictly focused on Cisco's Internetwork Operating System (IOS), and has relevance to administrators of all sorts of access control equipment. There's emphasis on traffic minimization as well as security, as a section on using access lists to keep routing updates off stub networks exemplifies.

Like many books in the blue system-administration series, this one includes a lot of explanations of what each capability is for, and how each fits with other parts of the system. A lot of times, these sections include conceptual diagrams that show routes of communication and the desired access policies. Then come excerpts from real access lists (Sedayao focuses on IOS 10 and later) and, often, commentary on what the interesting lines of the lists are doing. It's a great way to teach people who have the ability and desire to experiment. Engineers, after all, typically like to learn by doing. --David Wall

Topics covered: The capabilities and limitations of access lists under the Cisco Internetwork Operating System (IOS) and other similar routing and access-control environments. Access policies (with emphasis on packet filtering), routing policies (via route filtering and route maps), and the details of Border Gateway Protocol (BGP) pertaining to access lists are all covered.

Product Description

Cisco routers are used widely both on the Internet and in corporate Intranets. At the same time, the Cisco Internet Operating System (IOS) has grown to be very large and complex, and Cisco documentation fills several volumes. Cisco IOS Access Lists focuses on a critical aspect of the Cisco IOS--access lists. Access lists are central to the task of securing routers and networks, and administrators can't implement access control policies or traffic routing policies without them. Access lists are used to specify both the targets of network policies and the policies themselves. They specify packet filtering for firewalls all over the Internet. The book covers three critical areas: intranets (or corporate networks), firewalls, and the Internet. This book differs from other Cisco router titles in that it focuses on practical instructions for setting router access policies. The details of interfaces and routing protocol settings are not discussed.

See all Editorial Reviews

Product Details

• Paperback: 272 pages
• Publisher: O'Reilly Media, Inc. (June 7, 2001)
• Language: English
• ISBN-10: 1565923855
• ISBN-13: 978-1565923850
• Product Dimensions: 9.1 x 6.9 x 0.7 inches
• Shipping Weight: 15.2 ounces (View shipping rates and policies)
• Average Customer Review: 3.8 out of 5 stars  See all reviews (8 customer reviews)
• Amazon.com Sales Rank: #561,063 in Books (See Bestsellers in Books)

Customer Reviews

Most Helpful Customer Reviews

4 of 4 people found the following review helpful:

3.0 out of 5 stars Good idea, good attempt. Bad tech editors and reviewers., March 24, 2004

By	whirlmind "v0ttena" (NJ USA) - See all my reviews

I wouldn't recommend this book to novice network wizards. But for those who can see and identify errors, lets just consider this book as a tech quiz, a la "find and fix". It's been fun for me. Come on... It's impossible to know everything. Don't blame author. He has done a good work. He just didn't have a good support team. Yes, errors, yes, typos, and triple yes overall weight of all discrepancies almost ruin all other good impressions. But still, there are a lot of great and cool tips and tricks I have found.
Hope there will be another edition.

4 of 4 people found the following review helpful:

4.0 out of 5 stars Good book to learn ACLs, August 29, 2002

By	Manas Kamal Bhattacharya (Newark, CA USA) - See all my reviews

This just the book one would like to read to go through the basics of Cisco ACLs. The author introduces the concepts with some very simple and easily understandable examples.

On the other hand, book is either a little outdated or author has intetionally not included many interesting ACL features. Features like turbo acls, dynamic acls, log input, extended communities are either not discussed or discussed very little in the book. The focus of the book is mostly control plane, the data plane is somewhat neglected.

Overall a decent book, at best a book for a beginner. For someone new to acls this book will help save a lot of time understanding acls, route-maps, prefix-lists, communities, as paths ....

3 of 4 people found the following review helpful:

2.0 out of 5 stars Not Accurate, February 18, 2002

By	Brett Hillman (Munford, TN United States) - See all my reviews

For a book to be used to teach people to use access-lists in Cisco hardware, this book contains entirely too many errors. The author should have either been more diligent or gotten a better (more Cisco knowledgable) proofreader. There are numerous ( I didn't bother to count) errors in both construction and application of the lists in this book.