cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
866
Views
0
Helpful
1
Replies

dap network filter and access-group acl

gdspa
Beginner
Beginner

I have this situation:

- dap with a network acl A

- access-group on the outside interface that applies acl B.

If acl A permits traffic but acl B denies it, traffic is denied.

If acl A denies traffic and acl B permits it, traffic is denied.

I would like to permit traffic with acl A even if it is denied by acl B. Is it possible?

Is always acl B applied to the traffic coming from the outside interface even if I apply other acls with dap?

1 Accepted Solution

Accepted Solutions

The syntax for applying an access-group on an interface is as follows:
hostname(config)# access-group access_list_name {in | out} interface interface_name [per-user-override]

The per-user-override keyword allows dynamic access lists that are downloaded for user  authorization to override the access list assigned to the interface.

Hope this helps.

View solution in original post

1 Reply 1

The syntax for applying an access-group on an interface is as follows:
hostname(config)# access-group access_list_name {in | out} interface interface_name [per-user-override]

The per-user-override keyword allows dynamic access lists that are downloaded for user  authorization to override the access list assigned to the interface.

Hope this helps.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers