In this white paper, we'll take a look at access control lists, often referred to as access lists or ACLs (sometimes pronounced "ackels"). In Cisco IOS, ACLs are used for many things, including but not limited to:

The idea of an access list is straightforward: it permits some things, and denies others. What exactly is being “permitted” or “denied” varies according to the application of the ACL. Although access lists for other protocols (such as IPX, AppleTalk, MAC addresses, etc.) exist, we'll be focusing on IP access lists. In general, only routers and multi-layer switches understand IP access lists.