Why can't we place the Extended ACL close to the destination not the source ? What will happen if we do so ?
1
-
Typically, you want standard ACLs as close to the destination as possible in order to prevent dropping too much traffic, and you want to place an extended ACL as close to the source as possible in order to not router traffic that is destined to be dropped because that wastes router resources.– Ron Maupin ♦Sep 9, 2019 at 15:22
Add a comment
|
1 Answer
You can place an extended ACL where you want (as long as it is in the path of the packet you want to filter of course). However, depending on the filtering parameters, it is usually better to put it close to the source. This way, undesirable traffic is denied close to the source network without crossing the network infrastructure, which limit bandwidth usage.
