Simple ACL Question??

[rocketlauncher]

Hi all,

I have a question on regards to an ACL.

Is there any difference between the following ACL commands?

permit tcp any eq

http://www any

permit tcp any any eq wwww

Are they redundant commands?

I see similar command throughout an ACL, but with different port assignment.

I just want to know if they're the same so we can delete one entry from the ACL.

Thanks in advance!

Rocket.

 

[jneiberger]

The first line permits any TCP traffic *from* port 80 to another host. The second line permits TCP traffic *to* any host on port 80.

HTH,
John

 

[voltron1011]

When reading access-lists always remember that they are written "FROM" first, followed by who they are going "TO"

So, in the first acl it reads:
Permit tcp FROM anywhere equaling WWW, TO anywhere.

the second acl reads a bit different:
Permit tcp FROM anywhere, TO anywhere equaling WWW.