the order of the statements in the config are as follows, as per the show commands (they are in a different order than how they were entered - I cannot see any reason why they were added in this order):
SPARE6509#sho access-list 50
Standard IP access list 50
30 permit 18.104.22.168
40 permit 22.214.171.124
10 permit 126.96.36.199
20 permit 188.8.131.52
50 permit 184.108.40.206
60 deny any log
70 permit 220.127.116.11, wildcard bits 0.0.0.255
SPARE6509#show run (excerpt)
access-list 50 permit 18.104.22.168
access-list 50 permit 22.214.171.124
access-list 50 permit 126.96.36.199
access-list 50 permit 188.8.131.52
access-list 50 permit 184.108.40.206
access-list 50 deny any log
access-list 50 permit 220.127.116.11 0.0.0.255
This is a Catalyst 6509 w/Sup32, with IOS 12.2(18)SXF6.
Can anyone confirm how the lines of a standard ACL are added to the config?
The ACL statements are applied as they were typed. In the show access-list output what you need to look is at the numbers in the begining of the lines. each line has its order number, the very first line starts with 10, the second line to be applied begins with 20, and so on.
The router (L3 switch) follows that order when a packet reach the interface; first compares the source and destination of the packet with the line 10, then with the 20, the 30, etc etc
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...