Difficulty: Easy
Correct Answer: (config-if)# ip access-group Blocksales in
Explanation:
Introduction / Context:
Named ACLs offer readability and easier maintenance than numbered lists. The method to apply them to an interface is exactly the same as for numbered ACLs: use ip access-group with the ACL name and the direction (in or out) in interface configuration mode.
Given Data / Assumptions:
Concept / Approach:
Command pattern: interface s0 then ip access-group Blocksales in. The keyword is identical for numbered or named IPv4 ACLs. IPv6 named ACLs use a different application command (ipv6 traffic-filter).
Step-by-Step Solution:
Verification / Alternative check:
Use show run interface serial 0 to ensure the ACL is bound, then test with traffic from a blocked host to see counter increments.
Why Other Options Are Wrong:
Common Pitfalls:
Final Answer:
(config-if)# ip access-group Blocksales in
Discussion & Comments