Symptom

"Login Enhancements-Login Block" feature a default access list is generated as mentioned below: show ip access-lists Extended IP access list sl_def_acl 10 deny tcp any any eq telnet log 20 deny tcp any any eq www log 30 deny tcp any any eq 22 log 40 permit tcp any any eq 22 log

Conditions

The creation of line 40 is useless since it is only allowing TCP. The entry should read as follows; 40 permit IP any any log

Workaround

Further Problem Description

This same behavior can be seen on the 2911 router running 15.1(4)M7.