09-28-2009 08:08 PM - edited 03-06-2019 07:55 AM
Hi Friends,
I have query regarding implementation of access list on a physical interface or on a vlan interface. Mean to say what is the difference in applying acl on (in).
Thanks,
09-28-2009 08:22 PM
An access-list applied outbound to a vlan interface is traffic going TO machines on that vlan.
An access-list applied inbound to a vlan is traffic coming FROM machines on that vlan.
09-28-2009 08:52 PM
Are these directions same with physical interface also.
Thanks,
09-28-2009 09:19 PM
Yes they are the same.
09-28-2009 10:02 PM
could you please tell me where will be the source and destination in both cases.
09-28-2009 10:14 PM
Take this for example.
You have a interface VLAN 10 and hosts in this VLAN
When you use this host to access other network, it will be the IN direction at interface VLAN 10
When host from other network access to this host , it will be the OUT direction at interface VLAN 10
Try to think of the direction of traffic with respect to the Interface itself.
IN Direction (IN to the interface)
Host --> Interface VLAN 10
OUT Direction (OUT from the interface)
Host <-- Interface VLAN 10
09-28-2009 08:23 PM
If you are querying about direction-wise,
IN = Traffic from the VLAN going out
OUT = Traffic going towards the VLAN
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: