Does CISCO ASA configuration “access-list” protocol name “ip” includes both “tcp” and “udp”?

StackOverflow https://stackoverflow.com/questions/4441427

  •  10-10-2019
  •  | 
  •  

سؤال

I have several lines and I wonder if some are shadowed due to this?

هل كانت مفيدة؟

المحلول

yes, but it doesnt include protocols like gre etc, if you need vpn tunnels or something similar

نصائح أخرى

You should be careful while defining access lists. Choosing ip will cover both tcp and udp so to prevent shadowing, you should order the ACL carefully, not put the ip ACL on top.

IP, TCP, UDP, ICMP, GRE, IGRP all use IP at the Network Layer. The IP statement does include all layer 3 protocols.

مرخصة بموجب: CC-BY-SA مع الإسناد
لا تنتمي إلى StackOverflow
scroll top