RE: IP Directed-Broadcast

From: Scott Morris (smorris@internetworkexpert.com)
Date: Tue Dec 16 2008 - 02:28:42 ARST

Next message: Scott Morris: "RE: RIP minimize updates"
Previous message: John Edom: "IP Directed-Broadcast"
Maybe in reply to: John Edom: "IP Directed-Broadcast"
Next in thread: Scott Morris: "RE: IP Directed-Broadcast"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

The doc CD notes "Standard access list number in the range from 1 to 199. If
specified, a broadcast must pass the access list to be forwarded. "

So following that logic... You are putting a restriction such that only
SOME directed broadcasts (e.g. from trusted sources) would be allowed.
Anyone else, presumably attacking your network, would still be denied.

Thus, to open up this functionality for particular problem solutions
(multicast helpers?) you are not also opening up your network to a large
security hole.

HTH,

Scott Morris, CCIE4 #4713, JNCIE-M #153, JNCIS-ER, CISSP, et al.
CCSI/JNCI-M/JNCI-ER
Senior CCIE Instructor

smorris@internetworkexpert.com

Knowledge is power.
Power corrupts.
Study hard and be Eeeeviiiil......

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of John
Edom
Sent: Monday, December 15, 2008 11:18 PM
To: Cisco certification
Subject: IP Directed-Broadcast

Hi,

Anyone explain me when and why we use ACL with command "ip
directed-broacast". I try to grab the concept of this from universcd but
couldnt.