VACL - two methods...

From: Mike Kraus \(mikraus\) (mikraus@cisco.com)
Date: Mon Jun 11 2007 - 17:57:09 ART

Next message: Con Spathas: "RE: Dynamips query"
Previous message: Ajay Prakash: "Test Message - Please ignore"
Next in thread: Narbik Kocharians: "Re: VACL - two methods..."
Maybe reply: Narbik Kocharians: "Re: VACL - two methods..."
Maybe reply: Mohammad Saeed: "Re: VACL - two methods..."
Maybe reply: Mike Kraus \(mikraus\): "RE: VACL - two methods..."
Maybe reply: Brian Dennis: "Re: VACL - two methods..."
Maybe reply: Tarun Pahuja: "Re: VACL - two methods..."
Maybe reply: Mike Kraus \(mikraus\): "RE: VACL - two methods..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi all!

Assume I am trying to prohibit DHCP within a given VLAN.

If I use this configuration, it all seems to work fine:

    access-list 101 permit udp any eq bootpc any eq bootps
    vlan access-map test1 10
     action drop
     match ip address 101
    vlan access-map test1 20
     action forward
    vlan filter test1 vlan-list 11

However, if I reverse the logic, I seem to lose all IP connectivity:

    access-list 102 deny udp any eq bootpc any eq bootps
    access-list 102 permit ip any any
    vlan access-map test2 10
     action forward
     match ip address 102
    vlan access-map test2 20
     action drop
    vlan filter test2 vlan-list 12

I do not see why the second configuration does not do the exact same
thing as the first. Can someone clarify?

Thanks,
Mike

Next message: Con Spathas: "RE: Dynamips query"
Previous message: Ajay Prakash: "Test Message - Please ignore"
Next in thread: Narbik Kocharians: "Re: VACL - two methods..."
Maybe reply: Narbik Kocharians: "Re: VACL - two methods..."
Maybe reply: Mohammad Saeed: "Re: VACL - two methods..."
Maybe reply: Mike Kraus \(mikraus\): "RE: VACL - two methods..."
Maybe reply: Brian Dennis: "Re: VACL - two methods..."
Maybe reply: Tarun Pahuja: "Re: VACL - two methods..."
Maybe reply: Mike Kraus \(mikraus\): "RE: VACL - two methods..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sun Jul 01 2007 - 17:24:48 ART