cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
316
Views
5
Helpful
2
Replies

ACL

alsayed
Level 1
Level 1

Hi

Why Like This?

access-list Mail-ACL-out extended permit tcp host 209.165.200.231 eq pop3 any

and Not Like This?

access-list Mail-ACL-out extended permit tcp host 209.165.200.231 any eq pop3

What's The Difference?

Thanks a Lot

2 Replies 2

Jon Marshall
Hall of Fame
Hall of Fame

Ali

access-list Mail-ACL-out extended permit tcp host 209.165.200.231 eq pop3 any

means allow the host/server 209.165.200.31 to send TCP packets with the source port of pop3 to any destination address on any address

access-list Mail-ACL-out extended permit tcp host 209.165.200.231 any eq pop3

means allow the host/server 209.165.200.31 to send TCP packets with a source port of any to any destination address with a destination port of pop3.

If 209.165.200.231 is your POP server then the first one is probably what you want.

Jon

Istvan_Rabai
Level 7
Level 7

Hi Ali,

The generalized format of tcp access-lists is the following:

permit | deny tcp (source address or address range) [source port or port range] (destination address or address range) [destination port or port range] [options]

Cheers:

Istvan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco