For any body who needs them, here are some acls I use to test full SRST functionality
BR1 access-list 150 deny ip 10.10.201.0 0.0.0.255 any access-list 150 deny ip host 10.10.110.2 any access-list 150 deny ip host 192.168.10.18 any (local phone ip address) access-list 150 permit ip any any HQ: access-list 150 deny ip 10.10.200.0 0.0.0.255 any access-list 150 deny ip host 10.10.110.1 any access-list 150 deny ip host 192.168.10.18 any (local phone ip address) access-list 150 permit ip any any BR2: access-list 150 deny ip 10.10.202.0 0.0.0.255 any access-list 150 deny ip host 10.10.110.3 any access-list 150 deny ip host 192.168.10.18 any (local phone ip address) access-list 150 permit ip any any apply as follows: int fa0/0.30 ip access-group 150 out You will need to bind MGCP to the loopback interface, but that's required half the time anyway. Adam Compton
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
