I'm not sure I quite understand the question, but based on what I think is
being asked, I would say that allowing only traffic addressed from the
local lan to enter the router through the local ethernet interface would
prevent anyone on the local lan from using a spoofed address to launch and
attack onto the internet. The profelactic result would be similar to using
Reverse Path Verification on the upstream router.
my $ .02
At 10:19 AM 09/25/2000 -0500, [EMAIL PROTECTED] wrote:
>What are the advantages/disadvantages/logic behind creating an access list
>that would permit only the local subnet to access and enter a router's one
>and only ethernet LAN interface? For instance, if one creates E0 to have
>IP address 192.168.16.1/24 would it be sensible to create an access list to
>permit only the 192.168.16.0 subnet to enter the router? Or would this be
>redundant, implied and unnecessary?
>
>
>
>
>
>
>Thank you,
>Raul De La Garza III
>CCNA NNCSS MCSE CNE
>Senior Network Engineer
>EmCare Incorporated
>Work 214.712.2085
>Mobile 817.991.7889
>FAX 214.712.2444
>Pager 877.270.9755
>e-mail: [EMAIL PROTECTED]
>
>
>
>
>
>WHEN a man begins to think that the grass will not grow at night unless he
>lies awake to watch it, he generally ends either in an asylum or on the
>throne of an emperor. ?G.K. Chesterton
>
>**NOTE: New CCNA/CCDA List has been formed. For more information go to
>http://www.groupstudy.com/list/Associates.html
>_________________________________
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>
Tom Pruneau
Trainer Network Operations
GENUITY
3 Van de Graff Drive Burlington Ma. 01803
24 Hr. Network Operations Center 800-436-8489
If you need to get a hold of me my hours are 7AM-3PM ET Mon-Fri
---------------------------------------------------------------------------
This email is composed of 82% post consumer recycled data bits
---------------------------------------------------------------------------
"Once in a while you get shown the light
in the strangest of places if you look at it right"
**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
