KB.15.15

For example, figure shows how to interpret the entries in a standard ACL.

Figure 238 A displayed standard ACL configuration with two ACEs

Extended ACL configuration structure

Individual ACEs in an extended ACL include:

• A permit/deny statement

• Source and destination IPv4 addressing

• Choice of IPv4 criteria, including optional precedence and ToS

• Optional ACL log command (for deny entries)

• Optional remark statements

Figure 239 General structure options for an extended ACL

For example, figure shows how to interpret the entries in an extended ACL.

Overview 329