acls & ip unnumbered

[primavat]

can i use IP unnumbered on a serial interface that has acl's? also, what's a good acl how-to? I want to know if I can use acls in and out on the same interface.

[nkhawaja]

Hi,

an unnumbered interface uses address from other interfaces. So in the ACL you can specify that address.

Unless you tell us what your goals are, that is very difficult to tell what ACL you are interested in.

ANyway here is a link for securing your perimeter router.

http://www.cisco.com/warp/public/707/21.html

Thanks

Nadeem

[primavat]

Thanks for the help. I wanted to provide anti-spoofing acls both in and out on the same interface. I want to filter protocols: finger, icmp, telnet, tftp, enable no small servers, no cdp, provide anti-DOS proection on the serial interface -- can you think of any more good protections for incoming traffic?

[nkhawaja]

Hi,

If you have patience, then download and go through this document

http://nsa2.www.conxion.com/cisco/download.htm

Cisco SAFE documents are also awesome

http://www.cisco.com/en/US/partner/netsol/ns340/ns394/ns171/ns128/networking_solutions_package.html

Thanks

Nadeem