Skip to main content

access-list

More
20 years 10 months ago #2543 by indebluez
access-list was created by indebluez
sorry for another post u guys...
but i jus wanna clear this up.....

QN (1)whats the difference between these 2 statements?
QN (2)whys the 1st statemt wrong?
(a)CISCO IOS allows only one access-list to be applied to an interface.

AND
(b)One access list may be configured per direction for each layer 3 protocol configured on an interface.

becoz when we write access-list....we say
access-list 110 deny ip source add n mask dest add n mask eq 23
access-list 110 permit ip any any
int e0
ip access-group 110 in
QN(3)so that makes it 2 statements but jus one access-list on an int?

will be a great help if u guys can explain! thx again
More
20 years 10 months ago #2545 by sahirh
Replied by sahirh on topic Re: access-list
Inde, you can configure one access list per direction.. meaning you can have an access-list for inbound traffic and an access-list for outbound traffic on the interface.

The first statement is not 'wrong' its just less correct than the second one.

Finally, you can have as many statements as you like in each access-list. These two statements both belong to access-list number 110 (extended IP access-list). You will only apply access-list 110 to an interface.. either inbound or outbound.

Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
More
20 years 10 months ago #2549 by tfs
Replied by tfs on topic Re: access-list
And don't worry about how many questions you ask.

As they say, there are no stupid questions (well, maybe one). :lol:

Thanks,

Tom
More
20 years 10 months ago #2551 by indebluez
Replied by indebluez on topic Re: access-list
hi guys...
IP is a connectionless protocol?

and RIP is capable of load sharing over multiple paths? how come?

thx!
More
20 years 10 months ago #2564 by sahirh
Replied by sahirh on topic Re: access-list
Lol you're like a CCNA trivia machine, this is really keeping me on my toes !

RIP can load share if it knows two routes to the same network. Uhm.. at least I think so :)

IP is connectionless.. TCP is connection oriented. IP is just the delivery boy.

Phew, ihatenetworkingtheory.com

Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
Time to create page: 0.124 seconds