ip inspect command

rakem

Can someone please explain exactly what the ip inspect command does?

The cisco press book glosses over the inspect command pretty quickly, from what i have gathered it enabled the router to act as a stateful packet filter which contains a state table and can dynamically modify ACLs to allow or deny traffic.

Is that correct?

lildeezul

yes correct. the IP INSPECT command , allows the router to use a stateful tracking method using session tables to inspect a specific protocol, so that it can dynamically adjust the ACL to allow back in.