From: Scott Morris (swm@emanon.com)
Date: Fri Nov 05 2004 - 01:31:38 GMT-3
It's an access list just like any other. ;)
If you want to deny 10.0.0.0/8, would you deny it or permit it?
The answer, of course, is that it depends on the application of the ACL.
Thinking from the routers' perspective, when getting ready to send packets
out (output list), if something is denied going out, would you send it?
Always think from the routers' perspective! Your router will appreciate it,
or at least your score will reflect that!
HTH,
Scott Morris, MCSE, CCDP, CCIE4 (R&S/ISP-Dial/Security/Service Provider)
#4713, JNCIP, CCNA-WAN Switching, CCSP, Cable Communications Specialist, IP
Telephony Support Specialist, IP Telephony Design Specialist, CISSP
CCSI #21903
swm@emanon.com
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of John
Matus
Sent: Thursday, November 04, 2004 9:40 PM
To: lab
Subject: dlsw lsap-output-list
when you want to deny a protocol <SNA> with the dlsw
remote...lsap-output-list, do you deny in the sap acl or permit?
access-list 200 deny 0x000 0d0d
access-list 200 permit 0x000 FFFF OR
access-list 200 permit 0x000 0d0d
Regards,
John D. Matus
MCSE, CCNP
Office: 818-782-2061
Cell: 818-430-8372
jmatus@pacbell.net
This archive was generated by hypermail 2.1.4 : Thu Dec 02 2004 - 06:57:38 GMT-3