>>>> access-list 181 deny ip 192.0.0.0 0.0.0.255 255.255.255.0 0.0.0.255 > access-list 182 permit ip 199.2.98.0 0.0.0.255 255.255.255.0 0.0.0.255 the latter permits something which the former does not deny. i.e. noop. randy