Re: Multiple access lists for interface

From: Bert Kellerman (bertke@xxxxxxxxxxx)
Date: Wed Oct 18 2000 - 23:52:28 GMT-3


   
According to the docs it must match ALL 'match' commands for the
corresponding 'set' to take place. Here is a link and a quote:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/apollo_
r/isoclns/3rdclns2.htm#1020042

'The match commands may be given in any order, and all defined match
criteria must be satisfied to cause the route to be redistributed
according to the set actions given with the set commands.'

Bert

Brian Hescock wrote:
>
> I just checked and old e-mail and a colleague just tested it as well--it's an
> OR operation. You only have to match one of the access-lists (which actually
> makes sense). Before I get flamed by everyone, please try it, thx.
>
> B.
>
> Derek Buelna wrote:
>
> > I believe that it has to be an and. If you have match address this, match
> > interface that and then set something, I can't imagine it doing an or.
> >
> > -Derek
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> > Brian Hescock
> > Sent: Wednesday, October 18, 2000 5:48 AM
> > To: Stan Buskus
> > Cc: 'ccielab@groupstudy.com'
> > Subject: Re: Multiple access lists for interface
> >
> > You can list multiple access-lists in a route-map. I can't recall off
> > hand if it treats them as an OR operation or an AND operation, I'd have to
> > check.
> >
> > Brian
> >
> > Stan Buskus wrote:
> >
> > > I don't have a router to test this, but if I remember correctly, the IOS
> > > only allows one out and one in access group per interface. However, I
> > > have several access lists which IP number define a particular group of
> > > people. Some interface will should allow only one group while other
> > > interface should allow several groups. I know I could create another
> > > access list that combines the groups, but I hope that there is another
> > > way like a map-class.
> > >
> > > Stan Buskus
> > >



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:27 GMT-3