ACL processing question for my Catalyst 6513

Generous provision there!

Those ACLs are badly specced - they don't do what you seem to think they will, but I think that's irrelevant to what you ask below.

Nope. As the packet arrives at the box the inbound ACL decides whether the packet is accepted at all. Once inside the box the routing and switching process (I use the terms loosely) decide which port to send the packet out of. The outbound ACL on that port decides whether the packet is transmitted or not. You also have to remember that, unlike a firewall, ACLs apply to packets, not connections. Packets in both directions for a particular communication have to be explicitly allowed by separate lists (unless you're using reflexive access lists or the firewall feature set, which you can't on a 6513 IIRC).

One of you is going to get a free lunch, but I can't tell which of you it is.

Sam

Thanks Sam. I get a free lunch. I thought that is how it worked, He thought that since the packet isn't leaving the router, Any other ACL's I have on the vlan inbound connections are useless, only the outbound connections on the vlans are used with the ACL's.

Now, how big of a jerk should I be? McDonalds or Texas Roadhouse? ;-)