IP access-list

From: thunai (thunai@cisco.com)
Date: Thu Jul 15 2004 - 07:40:40 GMT-3


Dear all ,
        I am working on the following config , I am trying to block all
the packets going thru an interface. I configured an ACL and applied it
to the interface on the OUT direction. Its not doing any filtering I am
able to ping the neighbor interface, However when I apply it to the in
direction it filters and I have acl log matches.

Can you please check , I am missing something

r1#ru inter as 9
Building configuration...

Current configuration:
!
interface Async9
 ip address 150.100.13.1 255.255.255.0
 ip access-group 105 out
 no ip directed-broadcast
 encapsulation ppp
 no ip route-cache
 no ip mroute-cache
 async default routing
 async mode dedicated
 no peer neighbor-route
end

r1#acl
Extended IP access list 105
    deny ip any any log
    deny icmp any any log
r1#ping 150.100.13.3

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 150.100.13.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 244/245/248
ms
r1#
r1#acl
Extended IP access list 105
    deny ip any any log
    deny icmp any any log
r1#

Regds
Thunai



This archive was generated by hypermail 2.1.4 : Sun Aug 01 2004 - 10:11:56 GMT-3