09-17-2014 03:22 AM - edited 03-04-2019 11:46 PM
What is the difference between wrting the port no. after source and after destination in ACL
ex : permit tcp host 10.1.1.1 eq 1389 10.2.2..0 0.0.255.255
And
permit tcp 10.2.2..0 0.0.255.255 host 10.1.1.1 eq 1389
Solved! Go to Solution.
09-17-2014 03:55 AM
permit tcp host 10.1.1.1 eq 1389 10.2.2..0 0.0.255.255
Will permit TCP traffic from source 10.1.1.1 and source port 1389 to destination 10.2.0.0/16
permit tcp 10.2.2..0 0.0.255.255 host 10.1.1.1 eq 1389
will permit TCP traffic to destination ip 10.1.1.1 and destination port 1389 from source pool 10.2..0./16
So port number after source tells about source port and port number after destination tells about destination port
--Pls dont forget to rate helpful posts--
Regards,
Akash
09-17-2014 03:55 AM
permit tcp host 10.1.1.1 eq 1389 10.2.2..0 0.0.255.255
Will permit TCP traffic from source 10.1.1.1 and source port 1389 to destination 10.2.0.0/16
permit tcp 10.2.2..0 0.0.255.255 host 10.1.1.1 eq 1389
will permit TCP traffic to destination ip 10.1.1.1 and destination port 1389 from source pool 10.2..0./16
So port number after source tells about source port and port number after destination tells about destination port
--Pls dont forget to rate helpful posts--
Regards,
Akash
09-17-2014 04:14 AM
Awesome ...!!! Thanks
07-10-2015 02:01 AM
But if it is for eg.Telnet traffic..then how do we decide whether it is frm source side or destination side??wont it be telnet communication on both sides??
07-10-2015 05:00 AM
See your posting: https://supportforums.cisco.com/discussion/12554126/acl-concept#comment-10635031
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide