222 The ABCs of TCP/IP
Destination IP address: 205.131.175.11
Destination TCP port: 80 (http)
When a reflexive access list is enabled, the characteristics of the outbound
packet are used to automatically create an opening in an inbound access list.
The resulting entry would be:
permit tcp host 205.131.175.11 eq 80 host 198.78.46.12
eq 1099
In examining the preceding entry, note that it is a mirror image of the
outbound packet. That is, the source and destination IP addresses and the
source and destination port numbers were exchanged. Given an appreciation
for how a reflexive access list operates upon packets, one can now examine
the tasks required to place this type of access list into effect.
There are four general tasks associated with the creation of ...