Access-list question

charleskoh · Joined: 20 Apr 2005 Posts: 2

Hi,

I have a router which the e0 is connected to network A and the S0 is connected to network B.I wanted to limit access from network B to A.

question: The access list is to be placed on e0(out) or s0(in) and why ?

Secenrio :
I have placed the access-list on s0(out) previously and it blocked some of the ports trying to access from network B(I have done a show log and show accesss-list to come to this statement)which are supposed to be allowed. I am curious as the access list is placed on the s0(out) not (in) and it should not have any effect on the incoming packets.

Any advice or comments will be greatly appreicated.

biofear1 · Joined: 02 May 2005 Posts: 1

There is a way to remember where access lists are to be placed. I learned this from a friend who used to be a Cisco instructor. SS represnts nazism so you never want that. SS (Standard ACL should never be closest to the Source). Therefore Extened ACL's should be closest to the source and Standard ACL's should be closest to the destination.