Access list question

[moetech]

If you have and extended access list, say access-list 110 permit ip any 192.168.1.0 0.0.0.255

What does the "any" mean?

Is it accept any source address? or Is it accept any destination address?

Thanks for your help!

Matt

 

[dogbert2]

The extended ACL works as permit <proto> source mask
dest mask <blah>....where source is the source
address and dest is the destination address. The
'any' says match anything

-Bill

 

[Taraporter]

The 'any' in your example states to match (and permit)any source going to the destination network of 192.168.1.0. If it were:

access-list 110 permit ip 192.168.1.0 0.0.0.255 any

That would mean to permit the source network of 192.168.1.0 to go to any destination.

HTH
Tara

 

[CCIEWANNABE]

access-list 110 permit ip any 192.168.1. 0.0.0.(255).
access-list 110 Means use source and destination addresses for matching
Range is from 100-199 for extended ACL.
ip any is short hand for 0.0.0.0 255.255.255.255
means that all the hosts on network 192.168.1.0/24 are included in your policy set.
A mask all 1's in your example 0.0.0.(255) means match anything in the final octet
Route once; switch many