Hello Everyone,

I know that access-groups can be applied to either directions on a
interface.

We create access-lists and associate them with the service policies. After
that we apply the service policy to an interface. Does this work the same
way as access-groups? If so one of the ACL entry will not work depending on
the direction we apply the service policy to.

class-map sig
match access-group 100

policy-map sig
class sig
set ip dscp af31

int range fast 0/23 - 24    --------------> interface for phone so
callmanager should be destination also there is signaling coming from
CallManager!!!!!!!!!!
service-policy *input* sig

*access-list 100 permit tcp any range 2000 2002 any ----------> CallManager
Source port*

*access-list 100 permit tcp any any range 2000 2002 ----------> CallManager
Destination port*

Is that correct?

Cheers,

Onur.

Reply via email to