topic Re: dap network filter and access-group acl in Network Security

dap network filter and access-group acl

gdspa — Mon, 11 Mar 2019 18:26:43 GMT

I have this situation:

- dap with a network acl A

- access-group on the outside interface that applies acl B.

If acl A permits traffic but acl B denies it, traffic is denied.

If acl A denies traffic and acl B permits it, traffic is denied.

I would like to permit traffic with acl A even if it is denied by acl B. Is it possible?

Is always acl B applied to the traffic coming from the outside interface even if I apply other acls with dap?

Re: dap network filter and access-group acl

Shilpa Shree Settikere Nanjundappa — Fri, 03 Sep 2010 14:43:24 GMT

The syntax for applying an access-group on an interface is as follows:
hostname(config)# access-group access_list_name {in | out} interface interface_name [per-user-override]

The per-user-override keyword allows dynamic access lists that are downloaded for user authorization to override the access list assigned to the interface.

Hope this helps.