At 06:26 PM 8/26/01, Brad Ellis wrote:
>Sami,
>
>You'll need to give more info than that.  The router does not care if the
>packets are originated from a host or another router.  It will filter
>packets based on packet information, ie, source address, destination
>address, port #...

This filtering happens as part of the packet-forwarding process. Packets 
sent by the router (such as pings) may not go through this process. Sorry 
that I don't have the details, but I have run into surprising results in a 
lab environment when testing access lists from a router. You need to test 
them from end hosts.

I can't believe I'm challenging a CCIE, ;-) but I was afraid nobody else 
would, and I think the question bears more research.

Priscilla

>Are you saying the router wont filter packets originated from the router
>itself?  How are your access-lists applied?  Inbound or Outbound?  What are
>you trying to filter?  Explain your situation a little better, and include
>your access-list if you so desire.
>
>-Brad Ellis
>CCIE#5796
>[EMAIL PROTECTED]
>used Cisco:  www.optsys.net
>
>""sami natour""  wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hi All ,
> > When I made standard access list I discoverd that it
> > prevented  packets originated form PC's and host but
> > not packets originated from other routers.Any idea why
> > this will happen.
> >
> > Best Regards ,
> > sami ,
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Make international calls for as low as $.04/minute with Yahoo! Messenger
> > http://phonecard.yahoo.com/
________________________

Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=17341&t=17341
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to