Re: OT:Is it good to apply ACL close to Access ( on MPLS PE) or

Hi sakthi,

Am not an MPLS guru, but regarding ACLS, i have one rule of thumb, I apply
acl's on the incoming interface closest to incoming traffic to reduce any
unnecessary CPU utilization.

cheers

C.

On Fri, Apr 9, 2010 at 11:59 AM, sakthi vadivel <
sakthivadivel.ccie_at_gmail.com> wrote:

> Hi ,
>
> Is it a right layer or location to configure ACL on MPLS PE's ? (BASED ON
> REQUIREMENT) ; For example , if i need to drop TCP port 45 packet before
> going to internet ? Is it a right practice to drop in the MPLS PE using ACL
> or Is it right to do it on Core ?
>
> As per my Cisco's knowledge , it would be on Access or Distribution layer
> .Core is to switch packet as fast as possible with redundant links ..
>
> Any inputs.?
>
> regards,
> sakthi
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Apr 09 2010 - 13:23:15 ART