01-21-2014 06:46 PM
On a port or vlan that doesn't need acl filtering is it more effecient to have nothing or a single permit ip any any? I understand that there's a default implied deny ip any any to block anything not allowed in a proceeding permit statement but I assume that only applies if an acl is assigned so I would think if you're going to just permit ip any any in an acl with out any denying before it i's better not to waste any processor time running packets through an acl filter since there's nothing to be rejected anyway.
Solved! Go to Solution.
01-23-2014 08:14 AM
Hi Vini, if I interpret correctly, there is no need for an acess list as it just takes system resources for no need.
-Tom
Please mark answered for helpful posts
01-23-2014 08:14 AM
Hi Vini, if I interpret correctly, there is no need for an acess list as it just takes system resources for no need.
-Tom
Please mark answered for helpful posts
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide