RE: Access lists in traffic shaping

From: Jon Carmichael (jonc@xxxxxxxxxxx)
Date: Mon Sep 10 2001 - 19:57:17 GMT-3


   
Your logic is correct. Only the destination port knows for sure, --and you
can only shape traffic that is outgoing. I would say yours looks correct.

JONC

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Jason Gardiner
Sent: Sunday, September 09, 2001 3:50 PM
To: ccielab@groupstudy.com
Subject: Access lists in traffic shaping

In fatkid 461, there is a question that requires an access-list to allow
telnet traffic to use 16 to 32 K. Their soluton uses an extended
access-list:

access-list 101 permit tcp any any eq telnet

Will this work? I thought that this would only allow for th intial
outbound packet to be shaped. My access-list was

access-list 101 permit tcp any eq telnet any

Since the source port will always be 23 while the remote port will change
to > 1023 once the intial session is established.

Is there a problem with my logic?

Thanks,

Jason Gardiner
Supervisor, Engineering Services
Sprint E|Solutions

"You can swim all day in the Sea of Knowledge and
still come out completely dry. Most people do."

- Norton Juster
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:32:16 GMT-3