#####   ######  #####    ###    #   #  ###  #   #  ######
##  ##  ##      ##  ##  ## ##   #   #   #   #   #  ##
#####   ####    #####   #   #   #   #   #   #   #  ####
##  #   ##      ##      ## ##    # #    #    # #   ##
##   #  ######  ##       ###      #    ###    #    ######

$ curl repovive.com/roadmaps/network-design/acls-and-firewalls/extended-acl-syntax

░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░██████████████████████████████████████████████████████████████████████████████████

#####   ######  #####    ###    #   #  ###  #   #  ######
##  ##  ##      ##  ##  ## ##   #   #   #   #   #  ##
#####   ####    #####   #   #   #   #   #   #   #  ####
##  #   ##      ##      ## ##    # #    #    # #   ##
##   #  ######  ##       ###      #    ###    #    ######

$ curl repovive.com/roadmaps/network-design/acls-and-firewalls/extended-acl-syntax

Repovive

Extended ACL Syntax - ACLs and Firewalls | Network Design | Repovive

Repovive.

Network Design26 sections · 911 units44h total

Open in Course

Extended ACL Syntax

Building complex rules

Here's the extended ACL syntax you'll use:

access-list NUMBER permit|deny PROTOCOL SOURCE WILDCARD DEST WILDCARD [eq PORT]

Common protocol values: ip (all traffic), tcp, udp, icmp. Port operators include eq (equal), gt (greater than), lt (less than), and range.

Example blocking Telnet:

access-list 110 deny tcp any any eq 23
access-list 110 permit ip any any

This blocks Telnet (port $23$ ) but allows all other traffic.