Re: Extentded -access list

From: Donny mateo Tandase (donnymateo@yahoo.com)
Date: Mon May 22 2006 - 13:40:55 ART


  First one is to allow tcp traffic originating from any host on 10.10.10.0/24 network destined to any host on 172.16.0.0/16 network with destination port of www (80)
  The second one is to allow traffic originating from any host on 10.10.10.0/24 with a source port number www (80) to go to any host on 172.16.0.0/16 network.
  

tony hall <tony_hall123@hotmail.co.uk> wrote:
  Hi,
Sorry for this very basic question,Please if someone can expain the
diffrence between the 2 following access-list.

1-ip access-list extented TEST
permit tcp 10.10.10.0 0.0.0.255 172.16.0.0 0.0.255.255 eq www

2--ip access-list extented TEST
permit tcp 10.10.10.0 0.0.0.255 eq www 172.16.0.0 0.0.255.255

Regards,



This archive was generated by hypermail 2.1.4 : Thu Jun 01 2006 - 06:33:22 ART