Please enable JavaScript.

Coggle requires JavaScript to display documents.

Module 4: ACL Concepts - Coggle Diagram

- - - - Standard ACLs
      - Extended ACLs
- - - - Wildcard mask bit 0 - Match the corresponding bit value in the address
      - Wildcard mask bit 1 - Ignore the corresponding bit value in the address
  - - - host - This keyword substitutes for the 0.0.0.0 mask. This mask states that all IPv4 address bits must match to filter just one host address.
      - any - This keyword substitutes for the 255.255.255.255 mask. This mask says to ignore the entire IPv4 address or to accept any addresses.
- - - - Only consider the source IP address.
      - Range: 1-99 and 1300-1999.
      - Recommended Placement: Near the destination to avoid unwanted blockages.
      - Use: Basic network traffic control.
  - - - Consider source and destination IP, protocols, and ports.
      - Range: 100-199 and 2000-2699.
      - Recommended Placement: Near the source to prevent unnecessary traffic.
      - Use: Fine-grained traffic control, such as restricting access to specific services.
  - - - Same as standard or extended ACLs but use a name instead of a number.
      - Advantages: Easier to manage and modify.
      - Use: When multiple ACLs are needed for better organization.