Due to the fact standard ip access-lists only operate on the source address, detailed granularity is not always possible. Care must be taken to avoid implementing undesirable policies. If a standard access-list is placed near the source it is very possible that access to devices other than those desired will be impeded. Viewing the figure below, let s assume that workstation C is device 15.1.1.5, and Workstation D is device 10.1.1.133. We also wish to implement a policy that will deny any access from remote Ethernet D. Placement is critical for this accomplishment.
All trademarks are trademarks of their respective owners.
Email the Webmaster . Inc. All rights reserved. Inc. All rights reserved.