From: Madhu NK (madhu_nk@xxxxxxxxxxx)
Date: Fri Sep 29 2000 - 02:42:11 GMT-3
Simon,
Crypto map defined will have an access list for those traffic which needs to
go through the crypto engine..this will be processed first and then comes
the other access list defined...
I do agree with crypto getting processed before the other filter..
From: Simon Baxter <Simon.Baxter@au.logical.com>
Reply-To: Simon Baxter <Simon.Baxter@au.logical.com>
To: "CCIE Group Study (E-mail)" <ccielab@groupstudy.com>
Subject: crypto map question
Date: Fri, 29 Sep 2000 13:20:33 +1100
Hi all.
On a point-to-point BRI, if you have a crypto map assigned to an interface
and a normal packet filter filtering for packets only between the two
endpoints of the BRI..
Am I correct in assuming the crypto gets processed before the packet
filters?
ie
int bri 0
ip add 192.168.1.6 255.255.255.252
crypto map blobby
ip access-group 101
...
...
!
access-list 101 permit ip host 192.168.1.5 host 192.168.1.6
??
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:09 GMT-3