| Author |
Access-List question
|
|
| studio78 2001-04-26, 9:55 pm |
| I know that a standard access-list should be placed as close to the destination as possible and an extended access-list should be placed as close to the source as possible. How do you when to use an input or output filter when using the access-group command? | |
| dmaftei 2001-04-26, 10:18 pm |
| Not sure what you're really asking. Anyway:
- if you want packets to not enter your router, apply inbound (access-group x in)
- if you want packets to not leave your router, apply outbound (access-group x out)
Does it answer your question?! | |
| pareek_kamal 2001-04-27, 12:19 am |
| well depende on conditions , if u want packets should not reach u from certain source use out bound & if u dont want ur network to send some packet to certain destination use outbound | |
| pareek_kamal 2001-04-27, 12:21 am |
| sorry , the last word is inbound | |
| dmaftei 2001-04-27, 9:04 am |
| quote:
Originally posted by pareek_kamal
if u want packets should not reach u from certain source use out bound...
The other way around. You are the router. If you want not to be reached, use inbound.
See also this thread http://www.examnotes.net/forums/sho...?threadid=17013 in CCNP. Terje gives a colorful explanation.  | |
| creamy_stew 2001-04-27, 11:27 am |
| Are you talking about SAP filters?
/creamy |
|
|
|