From: Scott Morris (swm@emanon.com)
Date: Sun Jan 18 2004 - 21:20:35 GMT-3
The answer to both is the source address. If you want source and
destination matching for MAC, use the 1100-1199 range. For IP, use the
100-199 range.
HTH,
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, CISSP,
JNCIS, et al.
IPExpert CCIE Program Manager
IPExpert Sr. Technical Instructor
swm@emanon.com/smorris@ipexpert.net
http://www.ipexpert.net
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Ellie Chou
Sent: Sunday, January 18, 2004 6:37 PM
To: ccielab@groupstudy.com
Subject: a basic acl question..
Hi, a basic acl question. (when you thought you know a topic pretty well,
some questions always jump out and surprise you! ;-( )when using standard
IP access list or mac access-list (700-799), there is only one IP or MAC can
be specified. When applying this access-list to interface to permit/deny
traffic, is it the source or the destination IP/MAC that's going to be
checked? thanks!Ellie
------------------------------------------------------------------------
Get a FREE online virus check for your PC here, from McAfee.
This archive was generated by hypermail 2.1.4 : Mon Feb 02 2004 - 09:07:47 GMT-3