Building configuration...

Current configuration : 5066 bytes
!
Configuration of Partition - access-list
!
!
!
!
ip access-list extended sample
 remark "allows BGP"
 permit tcp host 10.1.6.20 host 10.1.6.98 eq bgp
 permit tcp host 10.1.6.20 eq bgp host 10.1.6.98
 remark "allows sample to ping"
 permit icmp 10.1.6.16 0.0.0.3 host 10.1.6.98
 permit icmp 10.1.6.24 0.0.0.7 host 10.1.6.98
 remark "allows sample to ping"
 permit icmp 10.1.6.16 0.0.0.3 host 10.1.5.20
 permit icmp 10.1.6.24 0.0.0.7 host 10.1.5.20
 remark "allows sample to ping"
 permit icmp 10.1.6.16 0.0.0.3 host 10.1.6.144
 permit icmp 10.1.6.24 0.0.0.7 host 10.1.6.144
 remark "allows sample to ping"
 permit icmp 10.1.6.16 0.0.0.3 host 10.1.6.146
 permit icmp 10.1.6.24 0.0.0.7 host 10.1.6.146
 remark "allows sample to ping"
 permit icmp 10.1.6.16 0.0.0.3 host 10.1.6.148
 permit icmp 10.1.6.24 0.0.0.7 host 10.1.6.148
 remark "allows sample to ping"
 permit icmp 10.1.6.16 0.0.0.3 host 10.1.6.152
 permit icmp 10.1.6.24 0.0.0.7 host 10.1.6.152
 remark allows sample to ping
 permit icmp 10.1.6.16 0.0.0.3 host 10.1.8.26
 permit icmp 10.1.6.24 0.0.0.7 host 10.1.8.26
 remark allows sample to ping
 permit icmp 10.1.6.16 0.0.0.3 host 10.1.8.152
 permit icmp 10.1.6.24 0.0.0.7 host 10.1.8.152
 remark permit sample servers to ping
 permit icmp 10.1.6.16 0.0.0.3 10.3.14.0 0.0.0.127
 permit icmp 10.1.6.24 0.0.0.7 10.3.14.0 0.0.0.127
 remark allows sample to ping
 permit icmp 10.1.6.16 0.0.0.3 host 10.3.139.248
 permit icmp 10.1.6.24 0.0.0.7 host 10.3.139.248
 permit icmp 10.1.6.16 0.0.0.3 10.3.139.128 0.0.0.7
 permit icmp 10.1.6.24 0.0.0.7 10.3.139.128 0.0.0.7
 remark "allows sample workstation(s) to connect"
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.5.20 eq 4000
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.5.20 eq 4010
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.5.20 eq 4020
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.5.20 eq 4080
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.5.20 eq 4300
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.5.20 eq 4310
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.5.20 eq 4320
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.5.20 eq 4380
 remark "allows sample workstation(s)"
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.144 eq 4000
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.144 eq 4010
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.144 eq 4020
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.144 eq 4300
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.144 eq 4310
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.144 eq 4320
 remark "allows sample workstation(s)"
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.146 eq 4000
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.146 eq 4010
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.146 eq 4020
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.146 eq 4300
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.146 eq 4310
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.146 eq 4320
 remark "allows sample workstation(s)"
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.148 eq 4050
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.148 eq 4060
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.148 eq 4350
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.148 eq 4360
 remark "allows sample workstation(s)"
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.152 eq 4000
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.152 eq 4010
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.152 eq 4020
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.152 eq 4080
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.152 eq 4300
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.152 eq 4310
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.152 eq 4320
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.6.152 eq 4380
 remark permit sample workstation(s)
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.8.26 eq 4001
 remark permit sample workstation(s)
 permit tcp 10.1.6.24 0.0.0.7 host 10.1.8.152 eq 4001
 remark permit sample to connect
 permit tcp 10.1.6.24 0.0.0.7 10.3.14.64 0.0.0.31 eq 9815
 permit tcp 10.1.6.24 0.0.0.7 10.3.14.64 0.0.0.31 range 9821 9823
 remark permit sample to connect
 permit tcp 10.1.6.24 0.0.0.7 10.3.14.96 0.0.0.31 range 7400 7407
 remark permit sample UDP access
 permit udp 10.1.6.16 0.0.0.3 host 10.3.139.133 range 13001 13191
 permit udp 10.1.6.24 0.0.0.7 host 10.3.139.133 range 13001 13191
 remark permit sample TCP access
 permit tcp 10.1.6.16 0.0.0.3 host 10.3.139.134 range 13001 13191 log time-range test
 permit tcp 10.1.6.24 0.0.0.7 host 10.3.139.134 range 13001 13191 log-input
 remark allow sample to send PIM-Join
 permit pim host 10.1.6.20 host 224.0.0.1
 deny   ip any any
 permit ip 10.0.0.0 0.255.0.255 any
ip access-list extended test
access-list 97 remark this is a remark
access-list 97 deny   10.1.0.1 0.0.255.0 log
access-list 97 permit any
access-list 98 permit 10.16.5.19
access-list 98 permit 10.16.5.20
access-list 99 permit 10.16.5.19
access-list 99 permit 10.16.5.20
access-list 199 permit tcp 10.16.5.19 0.0.0.0 any eq 80
access-list 199 permit udp any any eq 1000
access-list 101 permit tcp any host 10.1.1.1 eq www
access-list 101 permit tcp any host 10.1.1.1 eq 443 log
access-list 101 remark this is a remark
access-list 101 permit ahp any any log-input
access-list 101 permit tcp host 10.1.1.1 eq ftp any eq tacacs log time-range test

!
ip access-list standard stdacl
 permit 10.1.1.1
ip access-list extended test2

access-list 198 permit tcp 10.16.5.19 0.0.0.0 any eq 80
access-list 198 permit udp any any eq 1000

ip access-list extended ios_partition_acl
 remark match protocol numbers
 deny   53 any any
 deny   55 any any
 deny   pim any any
 remark match source port range correctly
 remark COMMENTs as a list
 permit udp any range 3478 3481 host 172.16.1.1
 permit udp any range 50000 50019 host 172.16.1.1
 permit udp any range 50020 50039 host 172.16.1.1
 permit udp any range 50040 50059 host 172.16.1.1
 remark match TCP flags
 remark consecutive COMMENT
 permit tcp any host 192.168.100.1 established
 remark correct syntax for time-range ace
 permit tcp host 10.1.1.1 eq ftp any eq tacacs log time-range test

access-list 102 remark match protocol numbers
access-list 102 deny   53 any any
access-list 102 deny   55 any any
access-list 102 deny   pim any any
access-list 102 remark match source port range correctly
access-list 102 remark COMMENTs as a list
access-list 102 permit udp any range 3478 3481 host 172.16.1.1
access-list 102 permit udp any range 50000 50019 host 172.16.1.1
access-list 102 permit udp any range 50020 50039 host 172.16.1.1
access-list 102 permit udp any range 50040 50059 host 172.16.1.1
access-list 102 remark match TCP flags
access-list 102 remark consecutive COMMENT
access-list 102 permit tcp any host 192.168.100.1 established
access-list 102 remark correct syntax for time-range ace
access-list 102 permit tcp host 10.1.1.1 eq ftp any eq tacacs time-range test log

end
