Hmmm....
Copy / Paste fra nedenstående link:
This error message means that one or more of the ACEs in an ACL must have
the same mask.
Change the ACEs to have the same mask as the other ACEs in the ACL.
These error messages occur only if you have installed the enhanced software
image (EI) on your switch.
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12113ea1/2950smg/msg_acl.htm
/Rubeck
"Brian Ipsen" <spammers@nowhere.net> wrote in message
news:seb8hvo14lgg91elodesvjuc7ffjgfkgtf@news.inet.tele.dk...
> On Tue, 15 Jul 2003 13:41:24 +0200, "Kim Rubeck Jensen"
> <kim@rubeck.dk> wrote:
>
> >> Er det muligt at smide access-lister på fast-ethernet portene på en
> >> Catalyst 2950 - altså så man blokerer/tillader trafik til visse
> >> IP-adresser/services ??
>
> >Ja, da...
> >
> >Feks
> >
> >switch(config)# access-list 110 permit tcp any host 192.168.1.20 eq 25
> >switch(config)# interface fastethernet0/8
> >switch(config-if)# ip access-group 110 in
>
> ok, jeg får bare fejl ved følgende:
>
> access-list 101 permit udp any host 192.168.1.161 eq domain
> access-list 101 permit udp any host 192.168.1.162 eq domain
> access-list 101 permit tcp any host 192.168.1.120 eq smtp
> access-list 101 permit udp any host 192.168.1.118 eq snmptrap
> access-list 101 deny ip any 192.168.1.0 0.0.0.255
> access-list 101 deny ip any 192.168.3.0 0.0.0.255
> access-list 101 deny ip any 192.168.10.0 0.0.0.255
> access-list 101 deny ip any 192.168.81.0 0.0.0.255
> access-list 101 permit ip any any
>
> switch(config-if)#ip access-group 101 in
> %Error: The field sets of all the ACEs in an ACL on Ethernet interface
> should match.
> Please refer to the Software Configuration Guide to understand one
> mask restriction for ACLs on Ethernet interface.
>
> Generelt vil jeg forbyde adgang til 192.168.3.0 nettet samt
> 192.168.1.0-nettet - dog lige pånær nogle enkelte hosts i 192.168.1.0
> nettet....
>
> /Brian