ACL Syntax Question

amb1s1

I came across this ACL on my Job:
10 permit tcp any any neq telnet
Why they use that syntax instead of using the following:
10 permit deny any any eq telnet

peanutnoggin

amb1s1 wrote: »

I came across this ACL on my Job:
10 permit tcp any any neq telnet
Why they use that syntax instead of using the following:
10 permit deny any any eq telnet

10 permit tcp any any neq telnet

is a way to write a one line ACL to accomplish the denial of telnet and allowing of the rest of the TCP traffic to flow.

If they had used:

10 deny tcp any any eq telnet

---

they would have had to add
20 permit tcp any any

---

or no other traffic could've passed through the interface in which this ACL was applied.

Because the last line of an ACL is the hidden "deny any any".

HTH.

V/r

~Peanut