What should happen when I configure the below ACL on an interface in a cisco 7600 box?
access-list TEST 10 deny ip any any 20 permit ip any any
Basically, when I ping the directly connected IP to this interface, all I observe is the hardware counters are incremented for permit rule, while the packets are getting dropped at software?
I know such an access-list has no meaning, but then too how the packets are processed in this scenario?
Access-list TEST configured on R2 int g4/1for ingressing traffic.
Ping from R2 to R1 interface 4/1, and you get the below observations :
R2#show tcam interface g4/1 acl in ip mod 4 * Global Defaults shared Entries from Bank 0 Entries from Bank 1 deny ip any any permit ip any any(5 matches)
R2# show ip access-list TEST Extended IP access list TEST 10 deny ip any any (5 matches) 20 permit ip any any