Cisco CCNA (640-553) Security Training
Using the “bidirectional” command
By Charles Ross CCNA - CCNP #CSCO10444244
In today’s article, I’m going to quickly inform you about the Cisco IOS RITE configuration command named “bidirectional”.
Network administrators (like you) use the “bidirectional” command to enable (allow) incoming and outgoing IP traffic to be exported across a monitored interface.
In other words, by default a monitored interface only exports incoming IP traffic; but if you (a ccna) need to export outgoing IP traffic as well, you can use the bidirectional command to do so.
Below is the command’s syntax:
bidirectional
As you can see, the command is very easy to use it doesn’t use any keywords or arguments.
And, if you need to return a monitored interface back to its default behavior after configuring it with the command; all you have to do is type the word “no” in front of it like you see below:
Router(config-rite)#no bidirectional
Below is an example of the command being used:
Router>enable
Router#configure terminal
Router(config)#ip traffic-export profile charlesross
Router(config-rite)#interface FastEthernet1/0.1
Router(config-rite)#bidirectional
Router(config-rite)#incoming access-list 101
Router(config-rite)#outgoing access-list 101
Router(config-rite)#mac-address 7777.7777.3333
Router(config-rite)#end
Router#copy run start
In the example of above, the FastEthernet interface is being configured to export both incoming and outgoing IP traffic. Notice that the command is being performed in (RITE) configuration mode.
By the way, if you decide to use the command, make sure your router(s) is running Cisco IOS 12.3(4)T or higher.
I hope this article was very informative and helped you quickly understand the usage of the bidirectional command. If you need to learn more; I suggest you visit my website, (www.ccnaittechtips.com) were you’ll find the latest information regarding the Cisco CCNA (640-553) Security exam techniques.
To your success,
Charles Ross
CCNA- CCNP #CSCO10444244