Router access list is the list of condition that categorize packet and also filter unwanted packets.
And at 1 interface per direction, per protocol there should be only 1 ACL.
ACL list are of two types
Standard and Extended
In Number standard ACL range is 1-99, 1300-1999.
In Number standard ACL range is 100-199, 2000-2699.
As they arrive at the router
Extended IP Access List
Router access list is the list of condition that categorize packet and also filter unwanted packets. And at 1 interface per direction, per protocol there should be only 1 ACL. ACL list are of two types Standard and Extended In Number standard ACL range is 1-99, 1300-1999. In Number standard ACL range is 100-199, 2000-2699.
The command access-list permit ip any any must be added to the last line of an access list to allow all other data packets to enter and exit the router.
Access-lists are used for limiting the traffic say mainly for security purpose. Using access-list you can deny or permit the traffic from source address based on standard access list or deny or permit the traffic by classification of source or destination ip address, or by protocols . these are written in sequential order. So order of statement is very important . We should be clear of what to permit or deny .. sample config Standard access-list Router(config)#access-list 5 <permit> or <deny> <source ip address> Extended access-list Router(config)#access-list 111 <permit> or <deny> <protocol> <source ip address> <destination ip address> After creating access-list it will not be useful without applying on the interface where the traffic runs along the path. these should be applied in inbound direction or outbound direction of the interface as per our requirement. Most importantly when u want make changes , copy to text editor or notepad , do changes on them and remove the access-list config in the router and copy them fresh from the notepad.
access control list
an access-list is used.
router(config-line)#access-class 102 in
Extended
x -> 800-899
addresses that are accessible from the inside network
Network