What does this particular access-list mean?

[gman10]

Hello all-

access-list 110 deny tcp any host 172.16.xx.xx eq 23 log

The way I see it interpreted: This ACL is saying to deny any traffic to host 172.16.xx.xx. thru port 23 ?? Is this right? what does log do?

If what i'm saying is incorrect then.. maybe it's telling me that this host 172.16.xx.xx will be denied tcp access outside via port 23? is that better?

HELP!

thanks all

gman

 

[lgarner]

The log keyword causes any hits on the acl to be logged, however you have logging set up. And, you're right. This denies tcp port 23 (telnet) access to 172.16.x.x from any system.

 

[gman10]

Thank you lgarner!