Its very weird question but i want some suggestion for you. We have edge router
ASR1000 where BGP running and
10G internet connection is terminated. Now i want to configure ACL on router to keep bad traffic outside and only allow specific port. Following scenario.
[Internal Public IP]------------[ASR1000]-------------[INTERNET]
Now how do i allow my Internal Public IP subnet to access everything on internet. In stateful firewall you can do it because it hold state of connection but Router ACL isn't stateful.
How do i solve this problem?
- Inside to outside everything allow
- Outside to inside only specific traffic