Maybe he was referring to the access-list vs access-group statements? The
access-list statements are entered first, but in the 'sh run', it shows them
after the access-group statements. I've never seen a router rearrange an
access-list. He's right, though, about the implicit permit/deny. I checked
the errata at the Sybex site, nothing there for that page, though.
> Hi,
>
> I don't think the IOS reorders access-lists after all what if it was
> required in the order it is. eg deny some addresses then permit any.
>
> Teunis
> Hobart, Tasmania
> Australia
>
>
> On Monday, April 16, 2001 at 08:45:39 PM, Scott Meyer wrote:
>
> > I was reading Sybex's old ACRC book. One of the study questions, as well
as
> > a tip in the chapter indicate that the IOS will reorder an access list
to
> > make more sense.
> >
> > For example, an access list entered as:
> > access-list 1 deny 172.16.20.0 0.0.0.255
> > access-list 1 deny 172.16.30.0 0.0.0.255
> > access-list 1 permit 172.16.40.0 0.0.0.255
> >
> > would be re-ordered as :
> > access-list 1 permit 172.16.40.0 0.0.0.255
> > access-list 1 deny 172.16.20.0 0.0.0.255
> > access-list 1 deny 172.16.30.0 0.0.0.255
> >
> > I played around a bit and could not confirm this. show ip access list
> showed
> > the access-list exactly as I entered it.
> > I had always thought that IOS would never re-arrange the list, no matter
> how
> > stupid it was entered.
> >
> > Am I on crack or is the book wrong?
> >
> > Scott Meyer
> > [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >
>
>
> --
> www.tasmail.com
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=870&t=861
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
