From: Volkov Dmitry (dmitry.volkov@rogers.com)
Date: Wed Nov 12 2003 - 00:16:06 GMT-3
> to test if the access-list is correct...after all is working
> reinstate the
> access list; I have the same configuration on my remote lab
> with no default
> route on the terminal server...
How do You explain it ?
This definitely doesn't work for my Linksys.
Does your D-Link do both source and destination NAT ?
>
> From: Jay Hennigan <jay@west.net>
> To: Guilherme Correia <razzolini80@hotmail.com>
> CC: ccielab@groupstudy.com
> Subject: RE: Access to Home Router
> Date: Tue, 11 Nov 2003 17:34:10 -0800 (PST)
>
> On Wed, 12 Nov 2003, Guilherme Correia wrote:
>
> > remove the access list..no default route is necessary...
>
> Why do you say this? The source outside address passed by
> the D-link will
> not be changed, and thus will not be in the 10.100.100.x subnet.
>
> Removing the access list will:
>
> * Weaken security as the vty would be accessible from the
> world (if it had
> a route back to the world.)
>
> * Not address the problem of the terminal server having no
> route back to the
> outside.
>
> --
> Jay Hennigan - CCIE #7880 - Network Administration - jay@west.net
> WestNet: Connecting you to the planet. 805 884-6323 WB6RDV
> NetLojix Communications, Inc. - http://www.netlojix.com/
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
> http://join.msn.com/?page=dept/bcomm&pgmarket=en-ca&RU=http%3a
> %2f%2fjoin.msn.com%2f%3fpage%3dmisc%2fspecialoffers%26pgmarket%3den-ca
>
> ______________________________________________________________
> _________
> Please help support GroupStudy by purchasing your study
> materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Dec 12 2003 - 12:29:10 GMT-3