-2

I have several lines and I wonder if some are shadowed due to this?

BenMorel
  • 34,448
  • 50
  • 182
  • 322
Choumarin
  • 400
  • 1
  • 6
  • 16

3 Answers3

1

IP, TCP, UDP, ICMP, GRE, IGRP all use IP at the Network Layer. The IP statement does include all layer 3 protocols.

Jmot
  • 11
  • 1
1

You should be careful while defining access lists. Choosing ip will cover both tcp and udp so to prevent shadowing, you should order the ACL carefully, not put the ip ACL on top.

Piyush Nahar
  • 21
  • 2
0

yes, but it doesnt include protocols like gre etc, if you need vpn tunnels or something similar

damir
  • 1,898
  • 3
  • 16
  • 23
  • This answer is incorrect. Cisco ASA command "access-list 101 extended permit ip host 1.1.1.1 host 2.2.2.2" permits all 256 IPv4 protocols from 1.1.1.1 to 2.2.2.2, including tcp, udp, and gre (which is protocol 47). – Darrell Root Oct 17 '19 at 16:57