On a port or vlan that doesn't need acl filtering is it more effecient to have nothing or a single permit ip any any? I understand that there's a default implied deny ip any any to block anything not allowed in a proceeding permit statement but I assume that only applies if an acl is assigned so I would think if you're going to just permit ip any any in an acl with out any denying before it i's better not to waste any processor time running packets through an acl filter since there's nothing to be rejected anyway.
