TechKnowSurge
Cisco CCNA 5.6
InteractiveNetworkFree

Standard or Extended ACL?

Number ranges, what each can match, where each goes: standard ACL or extended?

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

The two kinds of IPv4 ACL: - **Standard**: numbered 1 to 99 and 1300 to 1999. Each entry matches the source address only, with a wildcard mask or the host keyword. Placed close to the destination. - **Extended**: numbered 100 to 199 and 2000 to 2699. Each entry names a protocol (ip, tcp, udp, icmp) and matches source, destination and, for TCP and UDP, ports. Placed close to the source. Either kind can be named instead of numbered; a named ACL says standard or extended when it is created. The video gives the expanded ranges as "1300" and "2000 through 26.99"; they are 1300 to 1999 and 2000 to 2699.

What you'll learn

Aligned to

Cisco CCNA
5.6 Configure and verify access control lists

Key terms

Standard ACL
An Access Control List that filters traffic based solely on the source IP address, using numbering ranges 1–99 and 1300–1999.
Extended ACL
An Access Control List that filters traffic based on source and destination IP addresses, protocol, and port numbers, using numbering ranges 100–199 and 2000–2699.
Numbered ACL
An access control list identified by a number that implicitly defines its type; standard ACLs use numbers 1–99 or 1300–1999 on Cisco routers.
Named ACL
An access control list identified by a descriptive name instead of a number, created using the ip access-list standard command on a Cisco router.

Topics

Acl Standard Acl Extended Acl Acl Numbering Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →