cisco 837 and access-lists

[thek25]

I have an 837 ADSL router performing very well, but it is mostly wide open. I wanted to start putting access-lists on the device in order to start locking it down and am unsure which interface to place them on. It has the atm0 interface, this I believe is the physical interface for the four wire connection. Then it has listed: virtual-intreface1, virtual-interface2 and dialer1. Dialer1 shows the dynamic IP addy assigned to the atm0 interface by the ISP. I've looked at cco and it only lists the very helpful statement that I have have up to 500 lines per access-list. My intial guess would be the atm0, just because I can see it and can relate to a known object. Any suggetions?


thek25
CCNA

 

[jimmyzz]

Your atm interface is your "physical" interface. Though this is what the cable connect to to, you will probably notice that it is does not have any real network information (ie. IP) which your router uses for data communicate.

You dialer profile is your logical/virtual interface. It is configured for IP communication, and hence this it the interface that your router uses to pass network trafffic.

The rule is apply the access-list to the interface with the IP address. In your case it is your dialer interface not your ATM interface.

JimmyZ

 

[thek25]

jimmyzz,

Thanks. After looking at what you wrote and looking at what I wrote, it makes sense. Why apply an access list to an interface that has no ip when the logical one has the ip...had all the information, just didnt want to make the next step.

Thanks again

thek25
CCNA