cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
438
Views
0
Helpful
2
Replies

ACL on a port

laichenkang
Level 1
Level 1

I have a WAN port with 3 IP address.

Couple of questions:

Is it possible to apply the ACL only on a IP address instead of the port?

Is it possible to apply multiple ACL on a port or IP address?

2 Replies 2

paolo bevilacqua
Hall of Fame
Hall of Fame

1. No, but the ACL can be written so that effects the IP address as needed.

2 - same as 1.

Please rate post if it helps!

Kevin Dorrell
Level 10
Level 10

If you want to control traffic addressed to one of those three addresses, yes, you can do that as Paolo says, by crafting the access list according to the destination address.

If you want to control through traffic according to which IP address the remote router is routing to, then you cannot do it. The reason is that when the romote router passes you a packet, it could think it is routing through any one of those three addresses ... or even simply to the line itself. The point is that the packet carries only its original source address and its final destination address; it does not carry any information about what intermediate address the remote router thought it was routing through.

Kevin Dorrell

Luxembourg

Review Cisco Networking products for a $25 gift card