do you understand this?

[Soybomb]

So one of my classes this semester includes a bit on basic configuration of cisco routers. Today was a test, I got 2 2500 series routers and was told to allow traffic from a host attached to one, to a host attached to the other using rip. No problem.

Another portion of it though was some acl basics. The instructions read:
"Apply an ACL to the ethernet interface on one of the rotuers that blocks outbound IP traffic to the host on that network."

Am I just dumb or does that not make sense?

 

[AFB]

Just apply the ACL list to outbound on that interface. Let me go get my CCNA book again.

 

[n0cmonkey]

The statement itself makes sense, but I'm still trying to noodle why you would need to do that.

 

[AFB]

It say" The syntax for performing thio is IP ACCESS-GROUP ACCESS-LISTNUBER {IN|OUT}. The command is entered when in the configuration mode of the interface you want to apply it to . Most of the arguments are self-explanitory. The ACCESS-LIST-NUMBER is th previously created access list number you want to apply." In= inbound Out= outbound.

 

[Soybomb]

would be the end result of that rule?

 

[AFB]

You would have to create your own ACL, the above would apply it to the outbound of an interface.,

 

[Soybomb]

No no I'm familiar with creating them, applying them, etc I mean in terms of the host on the router with the rule couldn't ping the other host. What is the result of ""Apply an ACL to the ethernet interface on one of the rotuers that blocks outbound IP traffic to the host on that network."

 

[AFB]

It means, any traffic(unless stated otherwise) from that host will not be allowed out the interface.

 

[Soybomb]

wouldn't that be "blocks outbound IP traffic FROM the host on that network" The out and to put together just didnt make sense to me on that.

 

[spidey07]

-edit- not thinking.

time for another cocktail.

 

[AFB]

Let me start with this,


Applying it to the inside, would prevent any traffic from that host going any where onthat router. Applying it on out, would cause any traffic comming from another port on the router (from that host) to be dropped when it gets to the interface. It can still be allowed to go out other ports unlike when you apply it on in.