资料上就泛泛的说
An access lists can act as a firewall. A firewall filters packets and eliminates unwanted traffic at a destination. Where the administrator places an access list statement can reduce unnecessary traffic. Traffic that will be denied at a remote destination should not use network resources along the route to that destination.
• Place standard access lists close to the destination
• Place extended access lists close to the source
找不到感觉。那位指点一下。作者: chxu3549 时间: 20-6-2008 22:46
共同探讨
standard access lists only block ip address,so it is better put it near the destination which will allows the blocked ip address access other routers or applications,
extended access lists also block protocol, it is better to block it near the source which will save bandwidth,作者: conty 时间: 21-6-2008 20:33
基本ACL尽量靠近目的地址
扩展ACL尽量靠近源地址