I'm fairly new to Cisco routing. I've been using Cisco switching for a few years, but gaps in knowledge aren't apparent when the only layer 3 access to the equipment is internal. I've been using Mikrotik and Linux routing for a very long time.
Does Cisco (particularly the Nexus line) not have a concept for services only listening on particular VRFs, interfaces, IPs, etc.)?
Does Cisco (particularly the Nexus line) not have a concept for grouping IPs for the purpose of more simplified ACLs?
Does Cisco (particularly the Nexus line) not have a concept for separate input vs. forward firewalls\ACLs?
I've read various pieces of documentation on Cisco's site for SSH, VRFs, and ACLs, but no mention of any of the above types of activities. I'd assume that if not mentioned, they don't exist, but I thought I'd check before assembling a rather lengthy ACL.
-----
Mike Hammett
Intelligent Computing Solutions
Midwest Internet Exchange
The Brothers WISP
_______________________________________________
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
Does Cisco (particularly the Nexus line) not have a concept for services only listening on particular VRFs, interfaces, IPs, etc.)?
Does Cisco (particularly the Nexus line) not have a concept for grouping IPs for the purpose of more simplified ACLs?
Does Cisco (particularly the Nexus line) not have a concept for separate input vs. forward firewalls\ACLs?
I've read various pieces of documentation on Cisco's site for SSH, VRFs, and ACLs, but no mention of any of the above types of activities. I'd assume that if not mentioned, they don't exist, but I thought I'd check before assembling a rather lengthy ACL.
-----
Mike Hammett
Intelligent Computing Solutions
Midwest Internet Exchange
The Brothers WISP
_______________________________________________
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/