📜 ⬆️ ⬇️

Cisco: Package Processing "In Complex Configurations"

I regularly encounter the problem of remembering the sequence
the package is being processed at Cisco, respectively, and also regularly looking for this document

Maybe it will be useful to someone other than me:

Inside-to-Outside Package
  1. if ipsec then check input access list
  2. decryption - for CET (Cisco EncryptionTechnology) or IPSec
  3. check input access list
  4. check input rate limits
  5. input accounting
  6. policy routing
  7. routing
  8. redirect to web cache
  9. NAT inside to outside (local to global translation)
  10. crypto (check map and mark for encryption)
  11. check output access list
  12. inspect (Context − based Access Control (CBAC))
  13. TCP intercept
  14. encryption
  15. queuing

')
Outside-to-Inside package
  1. if ipsec then check input access list
  2. decryption - for CET or IPSec
  3. check input access list
  4. check input rate limits
  5. input accounting
  6. NAT outside to inside (global to local translation)
  7. policy routing
  8. routing
  9. redirect to web cache
  10. crypto (check map and mark for encryption)
  11. check output access list
  12. inspect CBAC
  13. TCP intercept
  14. encryption
  15. queuing


Retrieved from Cisco Document ID: 6209

Source: https://habr.com/ru/post/51139/


All Articles