RE: local sourced traffic no matching out bound ACL?

From: Brian Dennis (brian@5g.net)
Date: Fri Apr 04 2003 - 23:21:36 GMT-3


You are correct in your findings that packets sourced by the router are
not affected by an outbound ACL. If you want packets sourced by the
router to be affected by an outbound ACL let me know and I'll show you
how.

Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
Director of CCIE Training and Development - IPexpert, Inc.
Mailto: brian@ipexpert.net
Toll Free: 866.225.8064
Outside U.S. & Canada: 312.321.6924

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Richard Davidson
Sent: Friday, April 04, 2003 4:47 PM
To: groupstudy
Subject: local sourced traffic no matching out bound ACL?

If I have an access-list on E0 that denys all traffic
out and the router has an adjacency with a neighboring
ospf router, how does this route stay up. This router
can still ping neighboring devices out of the E0
interface. Does the router not follow the interface
access-list rule? I think it does. What do I do to
get the router to follow the rules of the access-list.
 Any link or explanation would help.

Thanks All.



This archive was generated by hypermail 2.1.4 : Thu May 01 2003 - 13:35:46 GMT-3