03-22-2025, 02:45 AM
AR550 appears to be incorrect. With standard access-lists, you can only have source addresses. So “access-list 1 permit any any” does not work and tries to resolve the second "any" through DNS. This leaves only one other possible correct answer. If this conclusion is wrong then please explain. 