#####   ######  #####    ###    #   #  ###  #   #  ######
##  ##  ##      ##  ##  ## ##   #   #   #   #   #  ##
#####   ####    #####   #   #   #   #   #   #   #  ####
##  #   ##      ##      ## ##    # #    #    # #   ##
##   #  ######  ##       ###      #    ###    #    ######

$ curl repovive.com/roadmaps/network-design/acls-and-firewalls/acl-processing-order

░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░███████████████████████████████████████████████████████████████████████████████████

#####   ######  #####    ###    #   #  ###  #   #  ######
##  ##  ##      ##  ##  ## ##   #   #   #   #   #  ##
#####   ####    #####   #   #   #   #   #   #   #  ####
##  #   ##      ##      ## ##    # #    #    # #   ##
##   #  ######  ##       ###      #    ###    #    ######

$ curl repovive.com/roadmaps/network-design/acls-and-firewalls/acl-processing-order

Repovive

ACL Processing Order - ACLs and Firewalls | Network Design | Repovive

Repovive.

Network Design26 sections · 911 units44h total

Open in Course

ACL Processing Order

Top-down evaluation

Routers process ACL rules from top to bottom. The first matching rule determines the action. No further rules are checked after a match. This first-match behavior means rule order matters.

If you have:

access-list 101 deny ip 10.0.0.5 0.0.0.0 any
access-list 101 permit ip 10.0.0.0 0.0.0.255 any

Host $10.0.0.5$ is denied because that rule appears first. Place more specific rules before general ones, or traffic won't be filtered as you expect.