Re: ACL Question

From: Sadiq Yakasai (sadiqtanko@gmail.com)
Date: Sun Feb 08 2009 - 12:25:50 ARST

Edouard,

Well, I think in the question you would normally find sufficient information
you need to answer the questions.

"the server is sending out traffic *with *UDP port 2796" - this is also
referring to the source port and not destination. The "with" keyword is
synonymous to "from" in this case.

If it said something like this: "the server is sending out traffic *to *UDP
port 2796" - this would mean the destination port number, see?

If all fails you, the proctor might help out (if you are lucky to have a
nice one on the day ;-))

Anyways, hope this helps a little.....

Sadiq

On Sun, Feb 8, 2009 at 11:45 AM, Edouard Zorrilla <ezorrilla@tsf.com.pe>wrote:

> Assuming that "the server is sending out traffic with UDP port 2796" is the
> source port of the server then ACL:
>
> permit udp host 10.10.10.10 eq 2796 any
>
> Assuming that "the server is sending out traffic with UDP port 2796" is the
> destination port the server is using then ACL:
>
> permit udp host 10.10.10.10 any eq 2796.
>
> I guess I would ask the proctor, wouldn't I ?
>
> Regards
>
>
> ----- Original Message ----- From: "Mahmoud shaker" <mashaker@gmail.com>
> To: <ccielab@groupstudy.com>
> Sent: Sunday, February 08, 2009 5:13 AM
> Subject: ACL Question
>
>
>
> HI
>>
>> if i have a server 10.10.10.10 connected to Router and i need to
>> match sending packets from this server
>> the question say
>> the server is sending out traffic with UDP port 2796
>>
>> so the ACL if i need it to be inbound to the router interface
>>
>> ip access-lis ext TEST
>>
>> permit udp host 10.10.10.10 any eq 2796
>>
>> or
>>
>> permit udp host 10.10.10.10 eq 2796 any
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
> 

-- 
CCIE #19963

Blogs and organic groups at http://www.ccie.net

This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:44:10 ARST