cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
997
Views
5
Helpful
4
Replies

What is the difference between wrting the port no. after source and after destination in ACL

dt2012800
Level 1
Level 1

What is the difference between wrting the port no. after source and after destination in ACL

ex : permit tcp host 10.1.1.1 eq 1389 10.2.2..0 0.0.255.255

And 

permit tcp 10.2.2..0 0.0.255.255 host 10.1.1.1 eq 1389

1 Accepted Solution

Accepted Solutions

Akash Agrawal
Cisco Employee
Cisco Employee

 

permit tcp host 10.1.1.1 eq 1389 10.2.2..0 0.0.255.255

Will permit TCP traffic from source 10.1.1.1 and source port 1389 to destination 10.2.0.0/16

 

permit tcp 10.2.2..0 0.0.255.255 host 10.1.1.1 eq 1389

will permit TCP traffic to destination ip 10.1.1.1 and destination port 1389 from source pool 10.2..0./16

 

So port number after source tells about source port and port number after destination tells about destination port

 

--Pls dont forget to rate helpful posts--

Regards,

Akash

View solution in original post

4 Replies 4

Akash Agrawal
Cisco Employee
Cisco Employee

 

permit tcp host 10.1.1.1 eq 1389 10.2.2..0 0.0.255.255

Will permit TCP traffic from source 10.1.1.1 and source port 1389 to destination 10.2.0.0/16

 

permit tcp 10.2.2..0 0.0.255.255 host 10.1.1.1 eq 1389

will permit TCP traffic to destination ip 10.1.1.1 and destination port 1389 from source pool 10.2..0./16

 

So port number after source tells about source port and port number after destination tells about destination port

 

--Pls dont forget to rate helpful posts--

Regards,

Akash

Awesome ...!!! Thanks 

But if it is for eg.Telnet traffic..then how do we decide whether it is frm source side or destination side??wont it be telnet communication on both sides??

See your posting: https://supportforums.cisco.com/discussion/12554126/acl-concept#comment-10635031

Review Cisco Networking products for a $25 gift card