ACL stop blocking packets

[netadmincsm]

Hi All

I have a master ACL called by around 6 or 7 Vlan Interface. 

About 15 or 20 minutes after applying the ACL, the traffic (that was blocked at the beginning) start to be permitted.

As soon as I start to modify the ACL the packets are block again.  Then, without changing anything the packet start to be permitted 15 or 20 minutes later.

Anyone have an idea ?

Thank you very much

[grinch182]

Yeah, I can open it by notepad, but it has no txt extension =)

Anyway thank once again, I'll read about wildcard in ACLs

[grinch182]

So, I'm not sure if it's clear for me now. Am I able configure each octet in wildcard when I use it in ACL?

[Jon Marshall]

Bascially yes. This is how they differ from subnet masks ie. you cannot have -

255.252.255.0 as a subnet mask because it must be contiguous. But there is no such requirement in acl wildcards masks so in effect you can configure each octet individually.

Most wildcards you see in acls are simply reverse subnet masks eg.

255.255.255.0 = 0.0.0.255

255.255.128.0  = 0.0.127.255

etc.. but they don't have to be just reverse subnet masks, they can be a lot more flexible than that.

Jon

[grinch182]

Thanks a lot, Jon. Now it's clear.