<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Webdings;
panose-1:5 3 1 2 1 5 9 6 7 3;}
@font-face
{font-family:"Century Gothic";
panose-1:2 11 5 2 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Hi Listers,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Further to my VoiP SIP hack that I experienced, I’m
going to use the following ACL to lock down our external interface. However,
my remote sites are on a DHCP internet service. Rather than code in the dynamic
external IP address, can I instead, reference the f0/0 specifically in the ACL?
The stuff in ( ) below is what will be replaced with real info. Will using
f0/0 work?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>---------------------------<o:p></o:p></p>
<p class=MsoNormal>ip access-list extended OUTSIDE_IN<o:p></o:p></p>
<p class=MsoNormal> permit tcp host (head office external IP) host (outside IP
address) eq 22 log<o:p></o:p></p>
<p class=MsoNormal> permit tcp host (head office external IP) host (outside IP
address) eq 23 log<o:p></o:p></p>
<p class=MsoNormal> permit ahp host (head office external IP) host (outside IP
address)<o:p></o:p></p>
<p class=MsoNormal> permit esp host (head office external IP) host (outside IP
address)<o:p></o:p></p>
<p class=MsoNormal> permit udp host (head office external IP) host (outside IP
address) eq isakmp<o:p></o:p></p>
<p class=MsoNormal> permit icmp host (head office external IP) any echo-reply<o:p></o:p></p>
<p class=MsoNormal> permit icmp host (isp) host (outside IP address)<o:p></o:p></p>
<p class=MsoNormal> permit ip host (cm01) (local voice subnet)<o:p></o:p></p>
<p class=MsoNormal> permit ip host (cm02) (local voice subnet)<o:p></o:p></p>
<p class=MsoNormal> deny ip any any<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>int f0/0<o:p></o:p></p>
<p class=MsoNormal>ip access-group OUTSIDE_IN in<o:p></o:p></p>
<p class=MsoNormal> no ip redirects<o:p></o:p></p>
<p class=MsoNormal> no ip unreachables<o:p></o:p></p>
<p class=MsoNormal> no ip proxy-arp<o:p></o:p></p>
<p class=MsoNormal> no cdp enable<o:p></o:p></p>
<p class=MsoNormal> no mop enabled<o:p></o:p></p>
<p class=MsoNormal>---------------------------<o:p></o:p></p>
<p class=MsoNormal><b><span style='font-size:12.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></b></p>
<p class=MsoNormal><b><span style='font-size:12.0pt;font-family:"Arial","sans-serif"'>Corbett
Enders</span></b><span style='font-size:12.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>Network
Manager<br>
Homes by Avi - 2007 Canadian Builder of the Year.<br>
Tel: (403) 536-7170<br>
Fax: (403) 536-7171<br>
</span><a href="http://www.homesbyavi.com"><span style='font-family:"Arial","sans-serif";
color:blue'>www.homesbyavi.com</span></a><span style='font-family:"Arial","sans-serif"'>
</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-GB style='font-size:14.0pt;font-family:Webdings;color:teal'>ü</span><span
lang=EN-GB style='font-size:8.0pt;font-family:"Times New Roman","serif";
color:teal'> </span><span lang=EN-GB style='font-size:8.0pt;font-family:"Century Gothic","sans-serif";
color:teal'>Please consider the environment before printing this email.</span><span
lang=EN-GB style='font-size:8.0pt;font-family:"Times New Roman","serif";
color:teal'> </span><span lang=EN-GB style='font-size:8.0pt;font-family:"Times New Roman","serif";
color:teal'><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>