📖 What is Extended ACL?
An ACL that filters traffic based on multiple criteria including source IP, destination IP, protocol (TCP, UDP, ICMP), and port numbers. Numbered 100-199 and 2000-2699.
🥋
Sensei Says:
"Place Extended ACLs as close to the source as possible to conserve network bandwidth by dropping unwanted traffic early."
📚 Certification: Certified Network Associate (200-301)
🔑 What are the Key Concepts of Extended ACL?
- ▸ Filters by source, destination, protocol, and port
- ▸ Numbered 100-199 and 2000-2699
- ▸ Best placed close to the source
🎯 How does Extended ACL appear on the 200-301 Exam?
Configuring an extended ACL to block HTTP traffic to a specific server while allowing all other traffic.
Troubleshooting an extended ACL that unintentionally blocks routing protocol updates.
❓ Frequently Asked Questions
Why place Extended ACLs close to the source?
To drop unwanted traffic as early as possible, conserving network bandwidth.
How do you specify a port range in an extended ACL?
You can use operators like 'eq' (equal), 'gt' (greater than), 'lt' (less than), or 'range' followed by the port number(s).