Standard access-list example on Cisco Router

Lessons Discussion
22

Locally generated traffic will never be checked by outbound access-lists on your interfaces.

You might be able to filter some outbound locally originated traffic with CoPP policing. I haven’t tested this but feel free to try it :slight_smile:

R1(config) control-plane
R1(config-cp) service-policy output MY_POLICY_MAP

Or maybe with some crazy tricks where you redirect traffic like I did in my NAT on a stick example:

1 Like