Hello Everyone, I know that access-groups can be applied to either directions on a interface.
We create access-lists and associate them with the service policies. After that we apply the service policy to an interface. Does this work the same way as access-groups? If so one of the ACL entry will not work depending on the direction we apply the service policy to. class-map sig match access-group 100 policy-map sig class sig set ip dscp af31 int range fast 0/23 - 24 --------------> interface for phone so callmanager should be destination also there is signaling coming from CallManager!!!!!!!!!! service-policy *input* sig *access-list 100 permit tcp any range 2000 2002 any ----------> CallManager Source port* *access-list 100 permit tcp any any range 2000 2002 ----------> CallManager Destination port* Is that correct? Cheers, Onur.