ACL
Access lists, often abbreviated as ACLs, are constructs composed of a series or a list of entries. These entries are used to match specific characteristics of entities such as packets, and to act upon those packets by either permitting them or denying them.
ACLs are used to perform two fundamental operations:
- Filtering - where match packets are either permitted or denied
- Classification - where matched packets are selected and treated in a different manner
ACLs operate at Layers 3 and 4 of the OSI model, and use IPv4 or IPv6 addresses as well as TCP or UDP ports to match traffic.
Links:
Links to this page:
- home
- ACL - IPv6 implicit statements
- ACL - operators
- ACL - time-based access list on IOS-XR
- ACL Logging
- ACL editor
- ACL log update threshold
- ACL logging matched packets
- ACL wildcard mask
- ACLs Filtering Locally Generated Traffic
- ASA - multiple VPNs between the same endpoints
- ASA - using FQDN in an ACL
- ASA NAT with DHCP assigned IP address on the outside interface
- ASA Static one to one NAT on a range of addresses
- ASA implicit rule
- ASA packet processing algorithm
- ASA security levels
- BGP - preventing transit traffic
- Best practice - prevent connectivity loss of remote device
- CISCO ASA IKEv2 hub and spoke
- Cisco Context-Based Access Control (CBAC)
- Cisco IOS Order of Operation
- Control Plane Policing (CoPP)
- Distribute-lists and named extended ACLs
- ICMP - response to a ping that is blocked by an ACL
- IGMP - access group
- IGMP - filtering using ACLs
- IPv6 - ACLs, RAs, and RSes
- IS-IS - route filtering
- MPP vs ACLs
- Management Plane Policing (MPP)
- Memory - CAM and TCAM
- Multicast - ASM and SSM on same network
- Multicast boundary filtering - filter auto RP
- NAT - translate address not directly connected to edge device
- OSPF ABR Type 3 LSA filtering using access lists
- PBR - matching prefix lists
- PBR - route-map and ACL deny statements not supported
- QoS - CBWFQ
- QoS - classification
- QoS Network Based Application Recognition (NBAR)
- Route-Map and ACL matching
- Route-map - multiple statements with sequence numbers
- Route-map with multiple parameters in one match statement
- Security - spoofing
- Troubleshooting high CPU and memory usage on a switch
- VLAN Access Lists
- VPN - default gateway for site to site VPN