ACL question

borumas

Another prep question that confused me was where would you ideally place a standard ACL and where would you ideally place a extended ACL? My first thought was ideally you would place them both as close to the source as possible but then I started doubting my answer, is that correct?

Paul Boz

Standard ACL's go as close to the destination as possible since they filter on source only. Extended ACL's go as close to the source as possible since they filter on both source and destination. Ideally you want to avoid standard lists, as there's no point in letting traffic fly all over your network only to be denied at the receiving end.

borumas

Thanks, that does make allot of sense the way you explained it, I just remember reading "as a rule filter as close to the source as possible" or something like that so I figured that was correct. Thanks again for answering my question.