Cisco Ccna (640-553) Security Training: Using The “bidirectional” Command

In today’s article, I’m going to quickly inform you about the Cisco IOS RITE configuration command named “bidirectional”.

Network administrators (like you) use the “bidirectional” command to enable (allow) incoming and outgoing IP traffic to be exported across a monitored interface.

In other words, by default a monitored interface only exports incoming IP traffic; but if you (a ccna) need to export outgoing IP traffic as well, you can use the bidirectional command to do so.

Below is the command’s syntax:

bidirectional

As you can see, the command is very easy to use it doesn’t use any keywords or arguments.

And, if you need to return a monitored interface back to its default behavior after configuring it with the command; all you have to do is type the word “no” in front of it like you see below:

Router(config-rite)#no bidirectional

Below is an example of the command being used:

Router>enable
Router#configure terminal
Router(config)#ip traffic-export profile charlesross
Router(config-rite)#interface FastEthernet1/0.1
Router(config-rite)#bidirectional
Router(config-rite)#incoming access-list 101
Router(config-rite)#outgoing access-list 101
Router(config-rite)#mac-address 7777.7777.3333
Router(config-rite)#end
Router#copy run start

In the example of above, the FastEthernet interface is being configured to export both incoming and outgoing IP traffic. Notice that the command is being performed in (RITE) configuration mode.

By the way, if you decide to use the command, make sure your router(s) is running Cisco IOS 12.3(4)T or higher.

I hope this article was very informative and helped you quickly understand the usage of the bidirectional command. If you need to learn more; I suggest you visit my website, were you’ll find the latest information regarding the Cisco CCNA (640-553) Security exam techniques.

To your success,

By: Charles E Ross

Article Directory: http://www.articledashboard.com

Charles Ross, CCNP #CSCO10444244 is the owner of Ittechtips.com; where you'll find free comprehensive information and videos on how to pass the CCNA (640-553) security exam. Sign-Up for "100 Free Videos" and, also learn more about the new "Cisco CCNA (640-553) Video Accelerated Training Course" at his website. www.ccnaittechtips.com