Why IP Options not in Numbered ACLs?

From: Farhan Anwar (farhan.anwar@gmail.com)
Date: Sat Oct 27 2007 - 17:38:49 ART


Hi all,
Can any one tell me why the IP Options are not present in numbered Extended
ACLs and are present in Named IP Extended ACLs?
Any specific reason.

Example:
Router(config)#access-list 101 permit ip any any ?
  dscp Match packets with given dscp value
  fragments Check non-initial fragments
  log Log matches against this entry
  log-input Log matches against this entry, including input interface
  precedence Match packets with given precedence value
  time-range Specify a time-range
  tos Match packets with given TOS value
  <cr>

Router(config)#ip access-list extended 101
Router(config-ext-nacl)#permit ip any any ?
  dscp Match packets with given dscp value
  fragments Check non-initial fragments
  log Log matches against this entry
  log-input Log matches against this entry, including input interface
  option Match packets with given IP Options value
  precedence Match packets with given precedence value
  reflect Create reflexive access list entry
  time-range Specify a time-range
  tos Match packets with given TOS value
  <cr>

-- 
Farhan Anwar
MCSE, CCNP, JNCIA
www.farhananwar.com


This archive was generated by hypermail 2.1.4 : Fri Nov 16 2007 - 13:11:18 ART