About this interactive
A standard ACL matches the source address alone. Placed near the source, it blocks that source from everywhere, so the general rule is to put a standard ACL close to the destination it protects. Remember the implicit deny at the end of every list: an ACL with only deny lines blocks every other source as well.
What you'll learn
- Place a standard ACL close to the destination it protects, because it matches only the source address
- Predict what a placed standard ACL blocks, including a standard ACL at the source that blocks too much, and an ACL with no permit line
Aligned to
Cisco CCNA
5.6
Configure and verify access control lists
Key terms
- Standard ACL
- An Access Control List that filters traffic based solely on the source IP address, using numbering ranges 1–99 and 1300–1999.
- Access Control List
ACL
- A set of rules that defines which users or systems are granted or denied access to a resource.
- Implicit Deny
- A foundational access control principle in which any traffic or request not explicitly permitted by a rule is automatically blocked. It appears as a hidden deny-all rule at the end of every access control list.
Topics
Acl
Acl Placement
Standard Acl
Interactive
Predict
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →