I can't find any solid/clear documentation and I haven't been able to test this. Is there any difference between the single acl statment permit tcp host 192.168.10.10 host 192.168.20.20 eq 80and permit tcp host 192.168.10.10 eq 80 host 192.168.20.20...