Re: ACL

From: dhbrown@xxxxxxxxxxxx
Date: Fri Mar 31 2000 - 15:18:23 GMT-3

• Next message: Ron Johnson: "VPN - PIX Firewall to Checkpoint Firewall"
• Previous message: Truman, Michelle, BNSVC: "RE: BGP No best path ?"
• Maybe in reply to: clou@xxxxxxxxxxxxxx: "ACL"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
Chi,

You may want to add 'echo' to the end of each of those lines if the spec is to
allow 'ping' only. Otherwise it looks right to me.

David
(2nd try coming soon)

clou@ebnetworks.com wrote:
> May be you guys have a better idea,

E1 R2 E0 --- E0 R5 S0 (ACL 100 out) --- S0 R4 E0, R4 also has E1

The requiremnet is allow ping from R2 to R4. One thing I'm not
sure is do I need to define 6 entries just to satisfy the
requirement? e.g.

access-list 100 permit icmp host host
access-list 100 permit icmp host host
access-list 100 permit icmp host host
access-list 100 permit icmp host host
access-list 100 permit icmp host host
access-list 100 permit icmp host host

note: R2 E1 can use extended ping to R4

Any suggestion? Thanks.

Chi

• Next message: Ron Johnson: "VPN - PIX Firewall to Checkpoint Firewall"
• Previous message: Truman, Michelle, BNSVC: "RE: BGP No best path ?"
• Maybe in reply to: clou@xxxxxxxxxxxxxx: "ACL"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:07 GMT-3