Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The Cisco router ACL was configured by someone else. So what i want to do is i would like to give one user to access all ports incoming and outgoing.

when i tried like this

#access-list 101 permit any host host //the router interface //the user IP address

what did i do wrong on that command?

what is the correct way to give that user the full permission?


share|improve this question
up vote 2 down vote accepted

What you've done is allowed all traffic from the source .146 to the destination .254. What you need to do is to allow all traffic from the source .146 to any destination. You don't need to use an extended access list for something this simple, you could use a standard access list like this:

access-list 10 permit

share|improve this answer

This isn't really enough information to fully answer your question without knowing where the ACL is actually applied and in what direction(s), but as far as syntax for an extended ACL:

access-list 101 permit ip source destination

Somewhere before corresponding deny entries in the ACL, if you're wanting completely open access both directions (and again depending on if the ACL is applied input/output or to both incoming and outgoing ports), you would want:

access-list 101 permit ip host any

access-list 101 permit ip any host

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.