Hi all,
As pointed out by another poster, Dan Simoes, order is important in PIX
configuration. However, this is an issue only if there is a conflict or
overlap. Functionally, there should be no difference between Set #1 & Set
#2 in this example.
In my experience, Conduit statements are fairly order independent. Only in
cases which are very complex, or convoluted, have I seen the order become
an issue.
I hope that helps,
Lisa Napier
Product Security Incident Response Team
Cisco Systems
At 06:38 AM 11/7/1999 +0300, Alfred Collins wrote:
>Pix 4.1 config question: Are set #1, and set #2 (below) equal? In other
>words, is the order of these three conduit statements important?
>
>Set #1
>conduit (inside,outside) 166.87.142.26 0 ipinip 0.0.0.0 0.0.0.0
>conduit (inside,outside) 166.87.142.26 0 udp 0.0.0.0 0.0.0.0
>conduit (inside,outside) 166.87.142.26 0 tcp 0.0.0.0 0.0.0.0
>
>Set #2
>conduit (inside,outside) 166.87.142.26 0 tcp 0.0.0.0 0.0.0.0
>conduit (inside,outside) 166.87.142.26 0 udp 0.0.0.0 0.0.0.0
>conduit (inside,outside) 166.87.142.26 0 ipinip 0.0.0.0
>
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
