The following example shows how the implicit deny condition appears:
- host1(config)#access-list 1 permit 10.10.10.1
0.0.0.255
- host1(config)#access-list 2 permit 10.25.25.1
0.0.0.255
- host1(config)#access-list 3 permit any any
- host1(config)#show access-list
- IP Access List 1:
- permit ip 10.10.10.1 0.0.0.255 any
- deny ip any any
- IP Access List 2:
- permit ip 10.25.25.1 0.0.0.255 any
- deny ip any any
- IP Access List 3:
- permit ip any any
The implicit deny rule does not appear in the display for access list 3, because any prefix matches access list 3.