IP access list...in or out?

amod_pandya

Hi all

i am confused on when to apply an access-list on the inside or outside of an interface? Are there any rules for it?

thanks in advance!

methoselah

take the perspective as if you're a little guy standing inside at the center of the router.

from there, decide if you want to block stuff going IN thru an interface, prohibiting them from reaching and going out any other interface, or

if you want to block stuff going OUT thru an interface, while letting them flow out of others.

amod_pandya

thanks man...i certainly have a better view now!

2lazybutsmart

yeah.. but get out of the router or be routed at YOUR OWN RISK.

dissolved

2lazybutsmart wrote:

yeah.. but get out of the router or be routed at YOUR OWN RISK.

lmao!