Re: ACL Question

From: Edouard Zorrilla (ezorrilla@tsf.com.pe)
Date: Sun Feb 08 2009 - 12:51:59 ARST


Thank you Sir, I got it.

Seems that I have read more carefully questions from now on.

Regards

----- Original Message -----
From: "Sadiq Yakasai" <sadiqtanko@gmail.com>
To: "Edouard Zorrilla" <ezorrilla@tsf.com.pe>
Cc: "Mahmoud shaker" <mashaker@gmail.com>; <ccielab@groupstudy.com>
Sent: Sunday, February 08, 2009 9:25 AM
Subject: Re: ACL Question

> Edouard,
>
> Well, I think in the question you would normally find sufficient
> information
> you need to answer the questions.
>
> "the server is sending out traffic *with *UDP port 2796" - this is also
> referring to the source port and not destination. The "with" keyword is
> synonymous to "from" in this case.
>
> If it said something like this: "the server is sending out traffic *to
> *UDP
> port 2796" - this would mean the destination port number, see?
>
> If all fails you, the proctor might help out (if you are lucky to have a
> nice one on the day ;-))
>
> Anyways, hope this helps a little.....
>
> Sadiq
>
> On Sun, Feb 8, 2009 at 11:45 AM, Edouard Zorrilla
> <ezorrilla@tsf.com.pe>wrote:
>
>> Assuming that "the server is sending out traffic with UDP port 2796" is
>> the
>> source port of the server then ACL:
>>
>> permit udp host 10.10.10.10 eq 2796 any
>>
>> Assuming that "the server is sending out traffic with UDP port 2796" is
>> the
>> destination port the server is using then ACL:
>>
>> permit udp host 10.10.10.10 any eq 2796.
>>
>> I guess I would ask the proctor, wouldn't I ?
>>
>> Regards
>>
>>
>> ----- Original Message ----- From: "Mahmoud shaker" <mashaker@gmail.com>
>> To: <ccielab@groupstudy.com>
>> Sent: Sunday, February 08, 2009 5:13 AM
>> Subject: ACL Question
>>
>>
>>
>> HI
>>>
>>> if i have a server 10.10.10.10 connected to Router and i need to
>>> match sending packets from this server
>>> the question say
>>> the server is sending out traffic with UDP port 2796
>>>
>>> so the ACL if i need it to be inbound to the router interface
>>>
>>> ip access-lis ext TEST
>>>
>>> permit udp host 10.10.10.10 any eq 2796
>>>
>>> or
>>>
>>> permit udp host 10.10.10.10 eq 2796 any
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> --
> CCIE #19963
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:44:10 ARST