[c-nsp] Weird ACL Translation - show run

Bruce Pinsky bep at whack.org
Wed Aug 31 16:21:55 EDT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

noc ops wrote:
> Hi,
> 
> Not sure if I'm missing something or what. But when I configured my 3640
> which is running c3640-jk9s-mz.122-4.T1.bin (not under warranty), I see
> below ACL output when I show run.
> 
> Routing/NAT is taking place fine w/o any problems but the below ACL
> output is bothering me.
> 
> 
> Any insight will be appreciated.
> 


As others have pointed out, it's the wildcard mask that forces the change
you're seeing.  Here's an example of both entries in one list:

R1(config)#ip access-list standard pat1
R1(config-std-nacl)#permit 192.168.0.0 0.255.255.255
R1(config-std-nacl)#permit 192.168.0.0 0.0.255.255


R1#show ip access-l
Standard IP access list pat1
    permit 192.0.0.0, wildcard bits 0.255.255.255
    permit 192.168.0.0, wildcard bits 0.0.255.255


- --
=========
bep

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (MingW32)

iD8DBQFDFhFjE1XcgMgrtyYRAiBXAKDbBvIeA98JY1vLrwAOFqqR4EjPWwCeJ4ez
ofNnMn9OOvElkzBuOrn5ips=
=yzV1
-----END PGP SIGNATURE-----


More information about the cisco-nsp mailing list