-: ACL :-

Access control list

" it is a list of statement which grouped together to filter the traffic

which enters an interface or leave an interface"

Traffic filtering on interface:-

----------------------------------------

1) Inbound
2) Outbound

Types:-

A) Numbered ACL
B) Named ACL

Both supports 2 types

1) standard ACL
( 1-99)
2) Extended ACL
(100-199)
-------------------------------------------------------------------------

-: Standard ACL :-
====================

1) it uses ip numbered ACL range ( 1-99).

2) Depends on source address only.
3) It needs to be placed nearest to destination router.

Practical Case :-

case 1:- ( subnet to subnet blocking)

case:- 2 ( host to subnet blocking)

---------------------------------------------------------------------------
Extended ACL
=================

1) it is more flexible than standard acl it allows to control TCP/IP

based services and protocols.

Protocol Port
-------------------------
HTTP 80
DNS 53
FTP 21 ( 20,21)
HTTPS 443
SMTP 25

2) it depends on both source as well destination.

3) It should be placed nearest to source router.
4) It uses ip numbered acl range ( 100-199)
------------------------------------------------------------------------