Hello,
I need to block ingress ntp and snmp traffic from the Internet to a few IP blocks our company owns and live inside our network. The ACL needs to be created on an ASR1001. Here's the ACL I created but I am not 100% sure if it is correct. Do you see anything wrong with this ACL:
ip access-list extended BLOCKED_INGRESS_Trfc
10 deny ntp any 1.1.1.0 255.255.255.0 log-input
20 deny ntp any 2.2.2.0 255.255.255.0 log-input
30 deny ntp any 3.3.3.0 255.255.255.0 log-input
40 deny ntp any 4.4.4.0 255.255.255.0 log-input
50 deny snmp any 1.1.1.0 255.255.255.0 log-input
60 deny snmp any 2.2.2.0 255.255.255.0 log-input
70 deny snmp any 3.3.3.0 255.255.255.0 log-input
90 deny snmp any 4.4.4.0 255.255.255.0 log-input
permit ip any any
Thanks in advance.
~zK
