Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

i know that command

access-list 10 permit 192.168.3.0 0.0.0.255

This list allows traffic from all addresses in the range 192.168.3.0 to 192.168.3.255 but i have question why we need 10?

share|improve this question
    
It also allows you to have multiple ACLs. You could have access-list 10 and access-list 11 and have them do two different things. It also allows a single ACL to have multiple lines. You could add another access-list 10 permit 192.168.1.0 0.0.0.255 and it will process the first line then work it's way down. The first line that packet matches will stop the processing. –  btk_ yesterday
add comment

1 Answer 1

The 10 is denoting which number the access-list is - it is identifying it. So if you have different ACLs that you want to apply to different interfaces, you would give them different numbers to differentiate them. When you apply the ACL to an interface, you tell the router that you want to apply ACL #10 to this interface.

share|improve this answer
3  
The 10 also identifies it as an IP standard acl (between 1 and 99). –  murisonc Nov 29 '10 at 14:23
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.