basic distribute-list with access-list

[John_S209]

so as a 'youthful' netadmin looking to expand what I know, I'm reading CCNP routing content & going through some review questions.  in using a distribute-list to refer to an access list, does the implied "deny any any" at the end of an access list still exist in applying an ACL for use in a distribute-list as it does in other application of access lists?

tia.  regards, 

JS

[luis_cordova · Accepted solution]

Hi @John_S209 ,

Yes, in every ACL there is implicit denial at the end.

Look at the example in this guide:

https://www.cisco.com/c/en/us/support/docs/ip/interior-gateway-routing-protocol-igrp/9105-34.html

access-list 1 permit 1.0.0.0 0.255.255.255
 router rip
 distribute-list 1 in

Any inbound RIP update is checked against access-list 1 and only routes that match a 1.xxx.xxx.xxx format are put in the routing table.

It is understood that networks that do not match what is allowed by the ACL, come to implicit denial and are not allowed

Regards

[John_S209]

@luis_cordova : excellent! exactly what I wanted to confirm.
thank you very much!