ip access-list question

From: Alan Chng (ccieteam@gmail.com)
Date: Thu Jul 31 2008 - 04:30:35 ART

• Next message: Farrukh Haroon: "Re: security blueprint question"
• Previous message: Joseph Brunner: "security blueprint question"
• Next in thread: Scott Strobeck: "Re: ip access-list question"
• Maybe reply: Scott Strobeck: "Re: ip access-list question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi All,

            Has anyone used access-list to filter traffic on Layer 2 (e.g.
MAC addresses)? If so, where are these typically implemented in a network?

Node_108(config)#access-list 700 permit ?
  H.H.H 48-bit hardware address

Secondly, does anyone filter ip access-lists on source ports? (I've only
ever done it with destination ports since source ports are typically
dynamically assigned by O/S)

Any advice is greatly appreciated.

Regards,
Alan

Blogs and organic groups at http://www.ccie.net

• Next message: Farrukh Haroon: "Re: security blueprint question"
• Previous message: Joseph Brunner: "security blueprint question"
• Next in thread: Scott Strobeck: "Re: ip access-list question"
• Maybe reply: Scott Strobeck: "Re: ip access-list question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Mon Aug 04 2008 - 06:11:58 ART