access-list problem

[selcuks2001]

Hello all,
Please tell me if there is a problem in the following access-list:
access-list 113 deny ip any 15.0.0.0 0.127.255.255
access-list 113 permit ip any any
access-list 113 deny ip any 19.0.0.0 0.255.255.255
Regards
s^3

 

[eurobadger]

I think you need to change the order, otherwise line 2 stops line 3 working.
EB

 

[chipk]

That would be correct. When a match is found in an access list, it doesn't process any further. Since line 2 allows ALL traffic, line 3 will always be ignored. The permit ip any any statement, if you have one, should always go at the end.

 

[selcuks2001]

Okay guys.
Thanks for the replies. I knew the answer. Just wanna be sure.
Regards...
SSS