ACL required for primary to secondary IP scope

[s.kanth]

Hi All,

We have ACL towards inbound interface. it has primary and secondary IP scope(ex 192.*.*.*/24 primary and 10.*.*.*/24 secondary) . Is it really required to have permit statements to allow primary scope IP to secondary scope vice versa. If yes, why ?

Thanks

Sri

[milan.kulik]

Hi,

IMHO, if you want to permit the devices in the primary IP scope to communicate with the devices in the secondary IP scope through your router, you need to permit that traffic in the inbound ACL applied on the interface.

As I suppose the devices having your router primary, resp. secondary IP address configured as their default GW, they will send the traffic to your router when reaching the other IP scope. And the ACL applied would drop the traffic if not permitted.

HTH,

Milan

[s.kanth]

Hi MIlan,

Thanks for your reponse. We need to allow the traffice between primary and secondary scope ,since both are different in broadcast domain. Can I have a any reference URL or doc.

Thanks

Sri