Hi,

On Wed, Mar 24, 2010 at 01:18:47PM +0000, Dobbins, Roland wrote:
> Note that the default gateway will be drawn from the access netblockss, not 
> the infrastructure netblocks covered by  the iACL.

Now we're talking.  I assumed that you wanted to include *all* IP addresses
configured on routers in the iACL - and that's quite impractical.

... and this is why I want "properly-implemented" rACLs and/or CoPP, to
protect those IP addresses that can't be put in iACLs.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             [email protected]
fax: +49-89-35655025                        [email protected]

Attachment: pgphkTvzcBavQ.pgp
Description: PGP signature

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to