Access-list

Unanswered Question
Oct 6th, 2007
User Badges:

If I have a line such as


access-list permit tcp host 192.168.1.2 host 192.168.1.3 eq 23


Do I have to use the word host as listed above or, can I just use the IP address?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
kian_wah Sun, 10/07/2007 - 00:12
User Badges:

Hi,


When you use the word "host" it is the same as saying the wildcard is 0.0.0.0 which stands for an exact match.


Eg: access-list permit tcp host 192.168.1.2 host 192.168.1.3 eq 23

and

access-list permit tcp 192.168.1.2 0.0.0.0 192.168.1.3 0.0.0.0 eq 23

are the same.


Regards,

Kian Wah

CCIE (R&S, Security) #14929

Aces-Star Technology

CCIE R&S/SP/Voice Rack Rental

http://www.aces-star-tech.com

mbradley4 Sun, 10/07/2007 - 08:52
User Badges:

Thank you very much! This will help me on my exam!

Actions

This Discussion