I have access-list on my router like this:
access-list 101 permit ip 10.1.130.0 0.0.0.255 host 10.1.1.25 access-list 101 deny ip any any log
And interface ip address is like this:
interface FastEthernet0/0 ip address 10.1.130.254 255.255.255.0 ip access-group 101 in
As I understand, only
host 10.1.1.25 will be able to ping all my network from outside.
But, on other outside routers (branches), all IPs with full access can ping
Why IPs with full access can ping my router's interface ip address despite the
deny ip any any in the end of ACL?
PS: All routers are cisco. They can ping only interface ip address, but not whole network.