Options

ACL's - my brain is not working.

phantasmphantasm Member Posts: 995
in CCNA & CCENT
My brain is dumb today. I can't remember how to determine which interface to apply an ACL on. Lets use this ACL as an example:

access-list 101 permit icmp any any
access-list 101 deny tcp any any eq 80

This would allow icmp to go through but block any web requests. Lets say I want this applied on the LAN intferace (Fa0/0). Is this inbound or outbound? My brain isn't working... lol.
"No man ever steps in the same river twice, for it's not the same river and he's not the same man." -Heraclitus
· Share on FacebookShare on Twitter

Comments

  • Options
    nice343nice343 Member Posts: 391
    outbound on LAN

    inbound on WAN


    I undestood ACL by doing trial and error. Try doing that You will be suprised how easy it is to see the direction of where to apply the ACL
    My daily blog about IT and tech stuff
    http://techintuition.com/
    · Share on FacebookShare on Twitter
  • Options
    gojericho0gojericho0 Member Posts: 1,059 ■■■□□□□□□□
    Think of inbound and outbound from the routers perspective:

    Inbound on a LAN interface would be any LAN traffic going into that interface, outbound would be on the return trip or where the LAN is the destination.

    The same thing would hold true for the WAN or serial links. Outbound on the serial link would be anything leaving the router out the serial interface. Inbound would be anything incoming on that serial interface
    · Share on FacebookShare on Twitter
  • Options
    phantasmphantasm Member Posts: 995
    Gotcha. Thanks again guys.
    "No man ever steps in the same river twice, for it's not the same river and he's not the same man." -Heraclitus
    · Share on FacebookShare on Twitter
  • Options
    gojericho0gojericho0 Member Posts: 1,059 ■■■□□□□□□□
    ICMP will pass, but TCP 80 will be dropped
    · Share on FacebookShare on Twitter
Sign In or Register to comment.