Avoid these common ACL mistakes:
Wrong rule order: Placing general rules before specific ones. The general rule matches first, and specific rules never trigger.
Forgetting implicit deny: Adding only deny rules without any permits. Everything gets blocked.
Wrong wildcard mask: Using subnet masks instead of wildcard masks. They're inverses of each other.
Wrong interface direction: Applying the ACL inbound when you meant outbound, or vice versa.