Access-list in ASA

[The_guroo_2]

Guys just a basic question ....in a attached diagram we have two interfaces.............indie and outside so how many types of acces-list we can have i guess we can have one for each........forgot the basics :-)

[varrao]

Hi,

Yes you can have one acl on one interface applied in one direction, let me explain by an example:

access-list test permit ip any any

access-group test in interface inside                   inside<------------------------------traffic

access-group test out interface inside                  inside------------------------------>traffic.

one acl can be applied for traffic coming into the interface and one for traffic leaving the interface.

I hope that resolves your query, do let me know if you have any questions.

Thanks,

Varun