Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Distribution layer, access layer

Hi, I have found some contradiction in these two books, I quote:

DESIGNING CISCO NETWOKRS edited by Diane Teare, Chapter 5, page 92:

Distribution layer: ".......The Distribution layer can have many roles, including implementing the following functions:

-Security

-Filtering by source od destinations address

....... "

CISCO CID by Mike Crane and Reggie Terrel Chapter 1, page 27:

"Access routers are typically where you provide secutity and filtering......"

My humble personal opinios is all filtering should be implemet at the Distribution layer wherr all routing Policy as well as address sumarization, translation and routes redistribution occurs. Yet, all the security -access-, should be implemented at the acces layer.

Am I wrong ?, which book should I throw away?

Thanks

1 REPLY
New Member

Re: Distribution layer, access layer

It just depends really on your network design.

Dont take it all as the bible.

The distribution layer can do a lot of security and filtering but the access layer can make the dist layer do less work by adding a bit more of security and filtering.

125
Views
0
Helpful
1
Replies
CreatePlease to create content