Скачать или смотреть Cisco SD-WAN - Localized Data Policy - Prohibit SSH Sessions (Spanish)

The second main use of localized policies is to configure data policies (ACL) used for filtering or remarking traffic at the interface level.

The objective of dropping SSH traffic can be achieved by matching on a source port of 22 or a destination port of 22 and dropping the traffic.

Note: Just as there can only be a single centralized vSmart policy that is activated at any point in time (although that policy can have many different component parts), the same is true of localized policies. Each router can only have a single licalized policy attached to it at any given point in time and that single localized policy can have as many component route policies and/or ACL as necessary.

Tunnel interfaces have implicit ACLs applied to them that automatically restrict the types of traffic permitted to enter these interfaces. Applying an explicit ACL can override this default behavior.

#1toops
#SDWAN
#Policies
#Cisco