Solved

Access List usage

Posted on 2011-09-08
4
237 Views
Last Modified: 2012-05-12
If I understand there are 3 types of Access list.

Standard 1-99
Extended 100-xxxx
Named Access list

Standard is used for allow/deny IP , ex:access-list 99 permit ip 192.168.1.0 0.0.0.255 any

Extended is used to allow specific port ex:access-list 101 permit TCP  192.168.1.0 0.0.0.255 any eq 23

I am not sure about the named access list when they are used.

Can you please go through my statements and correct me?

Thanks

0
Comment
Question by:jskfan
4 Comments
 
LVL 35

Assisted Solution

by:Ernie Beek
Ernie Beek earned 166 total points
Comment Utility
From IOS release 11.2 it was possible to use a name instead of an access list number.
So instead of: access-list 99 permit ip 192.168.1.0 0.0.0.255 any you can use: access-list in-out permit ip 192.168.1.0 0.0.0.255 any

You might to have a look at: http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml
0
 
LVL 18

Accepted Solution

by:
fgasimzade earned 167 total points
Comment Utility
Well, there are 2 types of access-lists, standard and extended. Each of them can be either named or numbered.


With standard access list you can only specify source address, not destination:

access-list 99 permit ip 192.168.1.0 0.0.0.255

With extended access list you can specify destination as well as ports.

Named access lists (standard or extended) is just an evolution of numbered access-lists, it allows you to specify a meaningful name for access-list
0
 
LVL 17

Assisted Solution

by:MAG03
MAG03 earned 167 total points
Comment Utility
Just to add to what fgasimzade has said,

Named access lists don't just let you specify a meaningful name but it is the only ACL where you can use sequence numbers so you do not have to remove edit and then add the existing access list when you need to make modifications.  With Named ALC you can just enter the sequence number where you want to place the new entry in the ACL and you are done.
0
 

Author Closing Comment

by:jskfan
Comment Utility
Thank you Guys!
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now