cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
210
Views
0
Helpful
1
Replies

Same security level interfaces with access lists

jeff6strings
Level 1
Level 1

We have an ASA 5510 with 3 connections, outside, inside and point2point running version 8.2 without nat control. We need hosts on the inside interface to communicate to hosts on the point2point interface. When we use the same-security-traffic permit inter-interface all works fine but we need to limit host to host traffic so we think ACLs will be the solution. Is there a way to establish inter interface traffic without same-security-traffic permit inter-interface and use access-lists or use this global command with access lists?

Thanks for any help.

Jeff

1 Reply 1

Hi

Yes, as you were saying, the best way is to configure the two interfaces with different security-levels and then use ACLs to restric the traffic.

Review Cisco Networking for a $25 gift card