Sunday, January 26, 2020

Question about a simple Cisco ACL

I've encountered the following ACL (used for policy-map) in an old Cisco 3600 router:

ip access-list extended ftp permit tcp any eq ftp-data any permit tcp any eq ftp any permit tcp any any eq ftp-data permit tcp any any eq ftp permit tcp any any range ftp-data ftp permit tcp any range ftp-data ftp any 

My understanding is that the first 4 rules are reduntant since the last two include traffic from any port to the FTP ports and vice versa. Am I missing something? Thanks in advance.



No comments:

Post a Comment