Demo: APIC-EM ACL trace: Troubleshoot ACLs

- [Narrator] So, Path Trace allows us to see a lot…of detail of our network, as an example, we can see…device statistics,…as well as interface statistics on an individual interface,…on a per device basis in our topology,…so now let's break the network; what I'm going to do…is configure an access list on this ISR, to block Telnet…traffic from the 3560 to the 3750,…so on the ISR 10.10.20.73, I'll log in, go to Global…Configuration Mode, and create an IP access list.…

In this case, it's going to be an extended access list,…and because we're doing APIC EM labs, I'll simply call it…APIC EM, I'm going to deny tcp traffic from a host…10.10.20.66, which is the 3560X switch,…to a destination host of 10.10.20.70,…which is the 3750X switch,…and the port number that we're going to specify…is port 23, in other words, Telnet,…now, because this is an access list, we need to permit…all other traffic, otherwise all traffic will be denied,…because of the implicit deny at the end of an access list,…so we're going to add the option, permit ip any any,…