Gday,
I had a look at this one, and drew up the ACL (for matching the
packets for MQC) using the NATed address of Lo0/R8 as the
destination, which is 7.56.0.1. The DSG has the address being the
"real" address of 10.7.8.8.
Extended IP access list T711out
10 permit ip host 7.7.7.7 host 7.56.0.1
I think this should be the case, as no traffic from 7.7.7.7 will ever
have a destination of 10.7.8.8, as the 10 range is not routed past R4.
Try to ping 10.7.8.8 and you get nothing, as expected.
So why does the DSG use the real address and not the NATed address?
After all, that is what is inbound on the Serial interface? Or does
NAT happen, then QoS and this page is being funny?
http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml
Having said that, the only thing related to MCQ here is "check input
rate limits". Or MCQ is done after NAT and is documented elsewhere?
Cheers,
Matt
CCIE #22386
CCSI #31207
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
