I started a Named ACL Lab today and my configuration is not quite working.
The first task is creating an ACL which blocks users from NSA's L1 to reach HTTPS on CIA's L2.
The addressing is fine and I can ping all interfaces.
My Configuration is placed on NSA, different from author's config which places the config on CIA's router. I later configured it the same way as the lab author configured, and it worked.
Extended IP access list NSA_L1_TO_CIA_L2
10 deny tcp 220.127.116.11 0.0.0.255 18.104.22.168 0.0.0.31 eq 443
20 permit ip any any (444 matches)
sh ip int e0/0
Ethernet0/0 is up, line protocol is up
Internet address is 192.168.13.3/24
Broadcast address is 255.255.255.255
Address determined by setup command
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Multicast reserved groups joined: 22.214.171.124 126.96.36.199
Outgoing access list is NSA_L1_TO_CIA_L2
Inbound access list is NSA_L1_TO_CIA_L2 (This shouldn't be here, I just put for test purposes)
Can someone explain why?