Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options answers only user 2142

For questions about access control lists (ACLs). For instance, you want to limit network traffic to increase network performance or provide traffic flow control on your network device. ACLs also provide a basic level of security for network access by defining which part of the network/server/service can be accessed by a host and which cannot.

3
votes
You are confusing routing with traffic flow. The routing protocol is used to learn networks from other routers. It does not directly affect the flow of traffic. If you want to block access to the …
answered Nov 10 '14 by Ron Trunk
2
votes
Private VLANS are a layer 2 technology. To filter specific ports, you need something that operates at layer 4. There are virtualized firewalls that would be applied per VM that could do this for you …
answered Dec 19 '14 by Ron Trunk
3
votes
You are using the wrong command. ip ssh source-interface command defines the source IP when starting an SSH session from the router. It has no effect on other traffic. To control who can SSH into yo …
answered Dec 4 '15 by Ron Trunk
1
vote
It is possible, and there are products on the market that do exactly that. But before you run out and buy one consider: Your ability to control access is dependent on your ability to determine locat …
answered Jan 23 '16 by Ron Trunk
2
votes
Access control lists operate at layers 3 and 4 of the OSI or TCP/IP model. File operations like reading and writing are application layer functions, so network ACLs have little or no control at that …
answered Jan 2 '18 by Ron Trunk
3
votes
Standard access lists filter on source addresses. So ACL 20 only allows packets whose source IP is 192.168.20.x. But Vlan 10 is a different subnet, so any packet from VLAN 10 is dropped. When you p …
answered Nov 7 '18 by Ron Trunk
5
votes
You can't have more than one access list per direction on an interface. So, to accomplish this, you will have to create a unique access-list for each interface that allows only the traffic you want.
answered Jun 3 '18 by Ron Trunk
2
votes
If you want to measure traffic and charge users based on how much traffic they generate, you will need to configure Netflow (or similar) to record traffic use. If you want to limit each users' share …
answered Nov 29 '17 by Ron Trunk