Danno
01-10-2008, 06:36 PM
If there are no access lists applied at all on a Cisco router (i.e my 3800 - 12.4), does that imply a permit any any? Basically, without access lists does it just route everything? I believe that's the case but I'd just like confirmation.
What I'm getting at is that if I'd like to just block one thing (or a couple things) and make my access list as follows:
access-list 101 deny icmp any any timestamp-request log
access-list 101 permit any any
(then apply it to my outside int.)
ip access-group 101 in
does this allow everything to run as it currently does with no access lists except for that it's now denying icmp timestamp requests?
Thanks for any help!
What I'm getting at is that if I'd like to just block one thing (or a couple things) and make my access list as follows:
access-list 101 deny icmp any any timestamp-request log
access-list 101 permit any any
(then apply it to my outside int.)
ip access-group 101 in
does this allow everything to run as it currently does with no access lists except for that it's now denying icmp timestamp requests?
Thanks for any help!