Standard vs Extended ACLs

Know what each ACL type can match and where placement matters.

beginneraclextended-aclccna

What is it?

Standard IPv4 ACLs primarily match source address information. Extended ACLs can match source, destination, protocol and transport ports, giving more precise control.

Why should I learn it?

Choosing the right ACL type avoids overly broad filtering.

How it works

Identify traffic requirement → choose match fields → order rules → apply in correct direction/location.

Real-world example

To block one source from TCP 23 to one server, an extended ACL provides the required detail.

Troubleshooting mindset

A technically correct ACL applied in the wrong direction can still break traffic.

Common mistake

Do not memorise the definition without connecting it to packet flow, device state and verification. Ask: what should happen, what actually happened, and which command or capture can prove the difference?

Quick recap

  • Understand the job of the protocol or feature.
  • Know where it sits in the traffic path.
  • Verify behaviour instead of guessing.
  • Connect the topic to the next networking layer.

Interview connection

Explain the concept in simple words first. Then give one practical example or troubleshooting check. That is stronger than repeating a textbook definition.

References & Further Reading

  • How to Master CCNA — supplied reference material.
  • CCNA Notes — supplied technical/configuration reference.
CONTINUE LEARNING