CBAC Scenario Question

From: Lab Rat #109385382 (techlist01@gmail.com)
Date: Wed Dec 13 2006 - 02:47:29 ART


What would be the behavioral difference between placing the "ip inspect"
interface statement on the internal interface (in) versus placing it on the
external interface (out), both with an inbound ACL on the external
interface?

I've tried both and can't really find a difference in behavior, but maybe
haven't tried long enough...

Has anyone seen anything inherently different between the two scenarios?
Why would one be preferred over the other, in your opinion?

Thanks,

Ed



This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:37 ART