I created two dynamic access list (with different name and under different extended ip access list) for the lock-and-key feature, but no matter what access list I choose for the interface, it's keeping using the first dynamic ACL, does it mean one router only can have one dynamic ACL ? Thanks Andy Here the config: (I use 103 ACL for int e 0, but it's always using dynamic ACL for 10.1.1.1 ??!!) --------------------- Current configuration: ! version 12.0 service password-encryption ! hostname Rabbit ! enable secret 5 $1$yKHa$nUhLHTLUhTRw6quNKtdvE. ! username test password 7 111D1C1603 username abc password 7 01120407 username abc autocommand access-enable timeout 5 username me password 7 060B0A ! ! ! ! ip subnet-zero no ip domain-lookup ! frame-relay switching ! ! process-max-time 200 ! interface Ethernet0 ip address 10.1.1.3 255.255.255.0 ip access-group 103 in no ip directed-broadcast ! interface Serial0 bandwidth 192 ip address 192.168.18.1 255.255.255.0 no ip directed-broadcast encapsulation frame-relay ip split-horizon no fair-queue no frame-relay inverse-arp IP 20 no frame-relay inverse-arp NOVELL 20 no frame-relay inverse-arp APPLETALK 20 frame-relay local-dlci 20 frame-relay intf-type dce ! interface Serial1 no ip address no ip directed-broadcast shutdown ! router rip redistribute static metric 1 network 10.0.0.0 network 192.168.18.0 ! no ip http server ip classless ! logging trap Unknown access-list 102 permit tcp any host 10.1.1.3 eq telnet access-list 102 dynamic myTest2 permit ip host 10.1.1.1 any access-list 103 permit tcp any host 10.1.1.3 eq telnet access-list 103 dynamic myTest3 permit ip host 10.1.1.5 any ! line con 0 exec-timeout 30 0 logging synchronous history size 256 transport input none line 1 16 transport input all line aux 0 transport input all line vty 0 4 login local ! end --------------------- _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. _________________________________ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]