PACKET Filtering with IPV4 (protecting Data Plane)

Data Plane in network deals with Traffic in Routing Protocol called packets.

It is essential to protect this packets while its transmission.

1. ACLS are used for Packet Filtering

      -It manages inbound traffic (getting to router interface from outside network)

      -Outbound traffic (Transit traffic going through the the router or generated by                  router)

     

   There are 2 Types of ACL

• Standard -They are used for L3 source address based data.
• Extended- L3/L4 source and destination Address based Data

1. Like in case we need to block some users from accessing to internet, here we can create an access group and place the IP address of the host/network which are to block those server in that group and apply it on Interface of Router.
2. Object Group contain multiple network which can be used for packet filtering in ACL. Instead of blocking single host we can also block entire subnet by placing a correct wild card Mask in ACL statement.