Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Silver

Site-to-Site IPsec VPN & Outside ACL

Order of operation qtn.

When ipsec is terminated on an ISR for site-to-site vpn, is the acl bound to the outside interface invoked before crypto acl or after?

thanks

1 REPLY

Re: Site-to-Site IPsec VPN & Outside ACL

The crypto ACL is not associated with the outside interface, so the ACL on the interface is filters first.

230
Views
0
Helpful
1
Replies
CreatePlease to create content