the ACL 101 matches all HTTP pakects while the ACL 102 matches TCP packets destined to Intranet webserver. These packets will be sent to HQ router. If a match command refers to several objects in one command, either of them should match (the logical OR algorithm is applied). For example, in the match ip address 101 102 command, a route is permitted if it is permitted by access list 101 or access list 102.