?
Solved

%Error: The field sets of all the ACEs in an ACL on Ethernet interface should match.

Posted on 2009-02-09
2
Medium Priority
?
2,060 Views
Last Modified: 2012-05-06
Hello,

I am able to use

ip access-list extended SERVER-07
permit ip host 172.16.7.1 host 172.16.7.0 0.0.0.12

but the same time, I can't any more of the following list.

permit ip host 172.16.7.1 host 172.16.10.7
permit ip host 172.16.7.1 host 172.16.10.8
permit ip host 172.16.7.1 host 172.16.13.2
permit ip host 172.16.7.1 host 172.16.13.3

Got Error.

%Error: The field sets of all the ACEs in an ACL on Ethernet interface should match.
Please refer to the Software Configuration Guide to understand one mask restrict ion for ACLs on Ethernet interface.

Even
permit ip host 172.16.7.1 host 172.16.10.7 0.0.0.0 OR
permit ip host 172.16.7.1 host 172.16.10.7 0.0.0..2 OR
permit ip host 172.16.7.1 host 172.16.10.7 0.0.0.10

does not work,
I have to use
permit ip host 172.16.7.1 host 172.16.10.7 0.0.0.12
same as of the first one.

I also tried to make two access list and assign both on the interface but it assign only one.

http://www.experts-exchange.com/Hardware/Networking_Hardware/Switches/Q_24101014.html


Any comments, How to resolve.
0
Comment
Question by:Ali77
2 Comments
 
LVL 5

Expert Comment

by:ionut_mir
ID: 23598164
One error that I see in your config is:

if you out host 172.16.10.7 - this already implies that it has an wildcard mask of 0.0.0.0 - so you don't need another wildcard.

So, in you SERVER07 access-list remove the "0.0.0.12" wildcard.
0
 

Accepted Solution

by:
Ali77 earned 0 total points
ID: 23598408
Please read the related question, what I need to achieve.
Thanks

How to Add More ACE's in the ACL to avoid "Out of Rule Resources" Erro
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question