ACL

cmadiam82 · ‎09-27-2007

Hi!

Im new to ACL's. This is my question. Is ACL will take effect in an interface in a pix even if this ACL is not used in a access group command?

example:

access-list inside_access_in permit ip any host CFS016

Just like that. Co'z i can't find any access group that use that ACL.

tnx!

ajagadee · ‎10-01-2007

Hi,

You need an access-group command to bind the access-list to the interface.

Before you remove the access-list from the configuration, check and make sure that the access-list is not used somewhere else other than the interface. For example, you could use the above mentioned ACL under crypto map for the interesting traffic.

name 1.1.1.1 CFS016

access-list inside_access_in permit ip any host CFS016

crypto map TEST 10 match address inside_access_in

I hope it helps.

Regards,

Arul