access-group 101 in interface outside

[ase2dais]

I am trying to differentiate ACL for routers and ACL for PIX,
- For the command "access-group 101 in interface outside":

- Is that applied to the outside interface for packet going in from the outside world into the PIX box (the housing)
-OR-

- Is that applied to the outside interface, for packets inside the PIX box.

(the analogy of being inside the PIX with different doors (PIX's outside interface)
... and packet being looked at from inside PIX going thru the outside interface (door)

... I hope I made my question clear, Can some experts help ?

it would clear some old baggage that I have picked up from the past.

ase2dais

 

[yizhar]

HI.

"- Is that applied to the outside interface for packet going in from the outside world into the PIX box"
Yes.

It is similar to placing an ACL on the router's interface to ISP with the "in" direction.

Pix ACL is always "in", there is no "out" option.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[ase2dais]

thks Yizhar,

Its amazing how a simple "YES" can unlock some mysteries.

ase