Security+ Lab · Router Hardening
You are the evening network tech at Tidewater Mercantile. A coworker built standard access list 27 on the edge router MERIDIAN to keep two misbehaving lab hosts off the internal segment, then applied it inbound on GigabitEthernet0/1. Now the whole segment is dark — nothing gets through. The list only contains deny entries, and every Cisco ACL ends with an unwritten drop, so traffic that isn't explicitly allowed is discarded. Add a permit statement so normal traffic flows again while the two blocked hosts stay blocked, then make the fix survive a reboot.
Task checklist
From the user prompt (MERIDIAN>), step up through the modes: enable → privileged mode (MERIDIAN#) configure terminal → global config (MERIDIAN(config)#) access-list 27 permit any → allow everything not denied above end → back to privileged mode copy running-config startup-config → persist to NVRAM Useful checks: "show access-lists", "show running-config". Type "?" at any prompt for a short command list.
Knowledge check