From: boby2kusa@hotmail.com
Date: Tue Oct 14 2003 - 12:41:08 GMT-3
The ip access-group 100 in under the interface fa0/1 will cause the router
to look at the access-list 100 when ever a packet is received in interface
fa0/1. make sense?
----- Original Message -----
From: "Hunt Lee" <hunt_lee@bigpond.net.au>
To: <ccielab@groupstudy.com>
Sent: Sunday, October 12, 2003 9:00 PM
Subject: ACL help on 3550
> Sorry about this stupid question...
>
> but when we do:
>
> int fa0/1
> ip access-group 100 in
>
> access-list 100 deny host 224.10.10.10 any
> access-list 100 permit ip any any
>
> I know that the 'in' means inbound, but is this 'incoming' traffic to the
server / router (or whoever which is connected to port 0/1), or is it
inbound to 3550 (what the server can initatied / reach from fa0/1 towards
3550 + the rest of network) ?
>
> In another words, is this ACL restricting what can reach the host behind
fa0/1, or what this host can access ?
>
> L.
>
> ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
This archive was generated by hypermail 2.1.4 : Mon Nov 24 2003 - 07:53:01 GMT-3