Re: [c-nsp] ACL querry

2010-12-15 Thread Peter Rathlev
On Wed, 2010-12-15 at 19:56 +1000, Edward avanti wrote: > I understood that ACL on int's were transitting traffic and ACL on line was > to the router? Unfortunately not; the interface ACL is applied before the router finds out if the packet is destined for itself or not, so you need the interface

Re: [c-nsp] ACL querry

2010-12-15 Thread Ziv Leyes
@puck.nether.net] On Behalf Of Edward avanti Sent: Wednesday, December 15, 2010 11:57 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] ACL querry Halo all, I understood that ACL on int's were transitting traffic and ACL on line was to the router? I ask because I could not access route

[c-nsp] ACL querry

2010-12-15 Thread Edward avanti
Halo all, I understood that ACL on int's were transitting traffic and ACL on line was to the router? I ask because I could not access router until I add my home IP on acl 101 (the inbound) Is this because the external interface fe0 has inbound rules applied? For example, fe1 is to our network of