julien leroiso <> wrote on Friday, April 18, 2008 6:18 PM: > Hello, > > If I have ALC and IPS activate on the same interface. > Which one will be run first ? > > It could look something like : > interface FastEthernet0/1 > description FE0/1-WAN > ip address xx.xx.xx.xx 255.255.255.240 > ip access-group 101 in > ip ips ips-wan in
IPS before ACL, as shown in http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6634 /prod_white_paper0900aecd80327257.html (Paragraph "Packets Flowing from Inside the Network to Outside the Network") oli _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
