Friday, January 26, 2007

Cisco: Know your IP ACLs!

Do you know what the difference between and standard IP ACL and an extended IP ACL?

You do eh? What about the ranges of numbers used for both- eh?

You can have up to 99 Standard IP Access Lists ranging in number from 1 to 99, the Extended IP Access Lists number range is assigned from 100 to 199.

Standard example:

access-list 10 permit 192.168.6.0 0.0.0.255
(Permit traffic from 192.168.6.1-254)

Extended example:

access-list 101 permit tcp 192.168.6.0 0.0.0.255 any eq 80
(permit port 80 traffic from 192.168.6.1-254 to any destination)

0 comments: