Access-lists

[khaledeshah]

Hi
I want to allow different subnets to access my server which is behind PIX
can I do this in one access-list or should I write access-list for each subnet?

 

[yizhar]

HI.

You should use a single access-list, with several statements.

You can not apply more then 1 access-list to an interface.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[khaledeshah]

Thks 4 ur reply
U mean like this
access-list acl_out permit tcp x.x.x.0 255.255.255.0 host y.y.y.y eq ftp
access-list acl_out permit tcp any z.z.z.0 255.255.255.0 y.y.y.y eq ftp

 

[yizhar]

HI.

Yes, but the syntax of your last line is wrong.

http://www.cisco.com/warp/public/110/pix_command_ref.shtml

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar