Access list

Rob,
I'm curious, is port 123 the ONLY port you want to permit between the sites? If there's no ACL implemented, ALL ports will be transmitted. If port 123 is blocked, it implies there is an existing ACL that you can find in the router config andmodify to allow 123 through.

Let's say you only want to permit port 123 to pass between the two sites. Where does the traffic originate? Digilab or Annex? Put the ACL as an outbound list on the ethernet port of the originating site. That way,the local router does the processing and only port 123 traffic is allowed to traverse the serial line which will almost always be slower than your ethernet interface. This is a performance consideration and a good rule of thumb. When you've got a slow link between sites, permit only the necessary traffic to pass across it. If you haven't been there yet, you can also find a wealth of information at the cisco site. Hope this has helped. Best wishes,
- ck

This question was closed by the author