Router access list is the list of condition that categorize packet and also filter unwanted packets.
And at 1 interface per direction, per protocol there should be only 1 ACL.
ACL list are of two types
Standard and Extended
In Number standard ACL range is 1-99, 1300-1999.
In Number standard ACL range is 100-199, 2000-2699.
Standard access lists are placed close to the destination. Extended access list are placed close to the source. This is because extended ACL's look at the source and destination IP address, whereas standard ACL's look at the source IP address only.
They check packets by source address They check packets by destination address
Named access lists can be identified by alphanumeric names while standard access lists cannot
x -> standard y -> extended
Standard Access Control Lists (ACLs) only allows you to permit or deny source addresses. You can not block based on protocol, port, or destination. Extended ACLS allow you to block traffic based on source address, destination address, source port, destination port, and protocol.
Access control lists (ACLs) are a list of permissions attached to an object that specify which users or groups are granted access to that object. Capability lists, on the other hand, are a list of permissions attached to a user that specify what resources that user can access. The key difference is that ACLs control access based on the object, while capability lists control access based on the user.
The access time for items is proportional to the distance they are from the end of the list which can become very time consuming for long lists.
Remove lines selectively when using named IP access lists Make subsequent additions at the end of the access list Every access list should have at least one permit statement
one
access control lists
Spoofing
Access Control List (ACL) lists each user that can access the object and specifies their permissions, such as read, write, or execute. It enforces security policies by determining who can access the object and what actions they can perform.