03-14-2006 08:09 AM - edited 03-03-2019 12:03 PM
Is it ok to have more than one access-group statement on a single interface. I need to allow all traffic from the internet into one specific address and only allow www and ftp traffic to the internet from the same address.
I need to install the foillowing
ip access-group 100 in
ip access-group 101 out
Can this be done?
Thanks
03-14-2006 09:22 AM
You can have one inbound and one outbound ACL per interface. So this is fine.
Hope this helps,
03-14-2006 09:26 AM
HI,
We can configure one access-list each per interface, per protocal, per direction.
i.e, we can have one access-list in inbound and one access-list in out bound direction on the same interface.. your config works 100 %..
Cheers!!!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide