Access List

vpresher · ‎03-14-2006

Is it ok to have more than one access-group statement on a single interface. I need to allow all traffic from the internet into one specific address and only allow www and ftp traffic to the internet from the same address.

I need to install the foillowing

ip access-group 100 in

ip access-group 101 out

Can this be done?

Thanks

Harold Ritter · ‎03-14-2006

You can have one inbound and one outbound ACL per interface. So this is fine.

Hope this helps,

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México

krishna.vv · ‎03-14-2006

HI,

We can configure one access-list each per interface, per protocal, per direction.

i.e, we can have one access-list in inbound and one access-list in out bound direction on the same interface.. your config works 100 %..

Cheers!!!