From: Rendger of CCIE2 (rendger@xxxxxxxx)
Date: Sat Jul 15 2000 - 01:47:01 GMT-3
I think these two access list can do the same access control.The first is to an
y protocol with source socket of sap,rip or 457 and the second deny any protoco
l with the dest socket sap,rip or 457.Because the ipx sap,rip and 457 serializa
tion packet always use the same source and dest socket,these two list can do th
e same control.
>Guys, are they the same?
>
>
>access-list 900 deny any any sap
>access-list 900 deny any any rip
>access-list 900 deny any any 457
>access-list 900 permit any any
>
>and
>
>
>access-list 900 deny any any all any sap
>access-list 900 deny any any all any rip
>access-list 900 deny any any all any 457
>access-list 900 permit any any all any
>
>
>Regards,
>Kim Seng
>May all being be happy!
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:53 GMT-3