- Posts: 24
- Thank you received: 0
ACL Help
- susetechie
- Topic Author
- Offline
- Junior Member
Less
More
19 years 1 week ago #12054
by susetechie
"Go away or I will replace you with a very small shell script"
ACL Help was created by susetechie
hey guys,
I am a acl newbie. pretty good with cisco, but for some reason I have a hard time wrapping my head around acls. This is the scenario: I see an access list that denies a certain ip in access list 120, another access list, 130 permits this ip. When I see the config for the interface I see that 120 is applied to the inside and 130 is applied to the out side. Like so:
ip access-group 120 in
ip access-group 130 out
What reason would there be to deny traffic on the inside and then allow it on the outside?? I am confused by this.
Also, does anyone have any links to very simplied access list help. for some reason I have a hard time with the reverse subnet mask deal. i cannot seem to work it out in my brain. lol
TIA,
susetechie
I am a acl newbie. pretty good with cisco, but for some reason I have a hard time wrapping my head around acls. This is the scenario: I see an access list that denies a certain ip in access list 120, another access list, 130 permits this ip. When I see the config for the interface I see that 120 is applied to the inside and 130 is applied to the out side. Like so:
ip access-group 120 in
ip access-group 130 out
What reason would there be to deny traffic on the inside and then allow it on the outside?? I am confused by this.
Also, does anyone have any links to very simplied access list help. for some reason I have a hard time with the reverse subnet mask deal. i cannot seem to work it out in my brain. lol
TIA,
susetechie
"Go away or I will replace you with a very small shell script"
19 years 1 week ago #12055
by zoony
Replied by zoony on topic Re: ACL Help
Is this interface internet facing . If so then that ip is being denied entry into your network , while your users are allowed to go to this network based on the 130 Out statement.
www.cisco.com/en/US/tech/tk648/tk361/tec...186a0080100548.shtml
www.cisco.com/en/US/tech/tk648/tk361/tec...186a0080100548.shtml
Time to create page: 0.112 seconds