RE : IPSec - confused about inbound ACLs

From: Richard Dumoulin (Richard.Dumoulin@vanco.fr)
Date: Fri Oct 28 2005 - 04:04:43 GMT-3


By the way in the well written MCNS book of which you're one of the authors,
the process of a packet being encrypted is finely described :) Although a
bit outdated now I am not sure why it has not been receommended more often

-- Richard

-----Message d'origine-----
De : nobody@groupstudy.com [mailto:nobody@groupstudy.com] De la part de
Scott Morris
Envoyi : vendredi 28 octobre 2005 07:11
@ : 'Hai Minh'; ccielab@groupstudy.com
Objet : RE: IPSec - confused about inbound ACLs

I believe it's referring to your interesting traffic ACL called in the
crypto map.

If the router receives something unencrypted (plain text) that it believes
should have been encrypted, it'll drop it.
Likewise, if it receives something encrypted that it believes should not
have been, it'll drop it as well.

Cheers,

Scott

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Hai
Minh
Sent: Friday, October 28, 2005 1:01 AM
To: ccielab@groupstudy.com
Subject: OT: IPSec - confused about inbound ACLs

Hi group

    I'm doing with IPSec and I'm confused about the inbound ACL. In the
SECUR Exam Certification Guide, they said that "if traffic comes in as clear
text and should be encrypted, the router drops the traffic". Does it mean
the router will drop clear-text traffic automatically or should I use an
inbound ACL to drop it?

Thanks
Hai Minh



This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:54 GMT-3