Cisco ACL type

Cisco ACL has two types: Standard ACL and extended ACL. The standard ACL of www.2cto.com allows or rejects traffic based on the source IP address. The destination address and port contained in the data package are irrelevant. The example on the right allows all traffic from the network 192.168.30.0/24. Because "deny any" is hidden at the end of the ACL, it will block all other traffic. Standard ACL is created in global configuration mode. Extended ACL extended ACL filters IP packets based on multiple attributes (such as protocol type, source IP address, destination IP address, source TCP or UDP port, destination TCP or UDP port, more precise control can be performed based on protocol type information (optional. In the figure, ACL 103 allows traffic from any address in the 192.168.30.0/24 network to any port 80 (HTTP) of the host. The extended ACL is created in global configuration mode.