Creating an internal extra hop [clearing house for ACLs] on 6509
Using CatOS 5.5.19 on SUP1A-2GE, Hybrid IOS 12.1(8b)E15 on WS-F6K-MSFC. [Hybrid]
I have a [FlexWAN + POS OC3] and an a few Ethernet ingress ports. Going out of the switch, I have multiple paths out [multiple destination nets of over Ethernet]. What I would like to do is to create an L3 extra hop such that the multiple paths coming to the 6509 have to go through a single interface in the MSFC where I can apply ACLs. After the ACLs are applied, they can leave as the normally would have.
I'm having quite a bit of trouble figuring out what to do in this situation. Basically, I want to make a place to put ACLs in the middle because its annoying to have to do this on each interface [it is elegant to use the 6509 as a clearing house with the application I am using]. Another complication is that the FlexWAN ports don't show up in CatOS as ports available as VLANs.
So the idea in IP is to come in from say, 192.168.9.x/24, WAN1, and 192.168.8.x/24, WAN2, and both of them have to go through a no port VLAN in the middle, 192.168.7.x, then on to whatever it wants, for the sake of argument, 192.168.1.1-> LAN area. The idea is to create this extra hop on 192.168.7.x such that I could put ACLs on "vlan7" in MSFC, everything destined for egress, or in this figure, the right
side, has to go through the middle to get there.
<tt> this section
ACLs on 1 MSFC
| *_!* |--------LAN3
I'm kind of confused as to what this would be called. I made up the terminology extra hop and clearing house - what is the correct term for this?
We are pleased to announce availability of Beta software for 16.6.3.
16.6.3 will be the second rebuild on the 16.6 release train targeted
towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are
looking for early feedback from customers befor...
Introduction Featured Speakers Luis Espejel is the Telecommunications
Manager of IENova, an Oil & Gas company. Currently he works with Cisco
IOS® and Cisco IOS XE platforms, and NX to some extent. He has also
worked as a Senior Engineer with the Routing P...
In this session you can learn more about Layer 3 multicast and the best
practices to identify possible threats and take security measures. It
provides an overview of basic multicast, the best security practices for
use of this technology, and recommendati...