Have you ever wondered why your access-list didn't look right after putting in some entries? Like this example:
"access-list 121 permit ip 192.168.106.0 0.0.0.255 any"
when you know that you typed in this:
"access-list 121 permit ip 192.168.106.0 0.0.0.255 192.168.107.1 255.255.255.255"
Weird. Well, its because it didnt like what you put in, so it put in the first line above. I needed the keyword 'host' in my second command above. It wanted to see this:
"access-list 121 permit ip 192.168.106.0 0.0.0.255 host 192.168.107.1"
If I had typed it in right, it would have gone it correctly and I wouldn't be wondering what happened. It would be nice it it would just complain to you somewhat, but it never does. Just keep that in mind when you are wondering why your ACL doesn't look right after you know you typed something different.
This is the retired Shane Killen personal blog, an IT technical blog about configs and topics related to the Network and Security Engineer working with Cisco, Brocade, Check Point, and Palo Alto and Sonicwall. I hope this blog serves you well. -- May The Lord bless you and keep you. May He shine His face upon you, and bring you peace.
Subscribe to:
Post Comments (Atom)
Thanks;;
ReplyDelete