Empty Access group

[reashad]

Hi All,

what is the purpose of using a ACL that is not defined on a VLAN or an Interface?

interface Vlan50
ip address 10.200.96.1 255.255.255.0
ip access-group 130 in

"access-list 130" doesn't exist on rest of the config

[Georg Pauwen · Accepted solution]

Hello,

somebody probably forgot to remove it, or has put it in there for future use. An access-group without an existing access list to match has no effect, that is, all traffic is allowed.

If you are in charge of the network, I would remove the line as it can cause confusion.

[balaji.bandi]

then that config is redundant and it not have any effect at all.

[Deepak Kumar]

Hi,

This seems a mistake and looking that the admin may forget to add or remove from the configuration. This is not doing anything and allowing everything.