Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

ACL

Hi!

Im new to ACL's. This is my question. Is ACL will take effect in an interface in a pix even if this ACL is not used in a access group command?

example:

access-list inside_access_in permit ip any host CFS016

Just like that. Co'z i can't find any access group that use that ACL.

tnx!

1 REPLY
Cisco Employee

Re: ACL

Hi,

You need an access-group command to bind the access-list to the interface.

Before you remove the access-list from the configuration, check and make sure that the access-list is not used somewhere else other than the interface. For example, you could use the above mentioned ACL under crypto map for the interesting traffic.

name 1.1.1.1 CFS016

access-list inside_access_in permit ip any host CFS016

crypto map TEST 10 match address inside_access_in

I hope it helps.

Regards,

Arul

103
Views
5
Helpful
1
Replies
CreatePlease to create content