Standard ACL & Extended ACL

[chrissnop]

hello guys, if I already have an standard  ACL applied to an interface. Is it still possible to create an extended ACL and apply it to the same interface?

Thank you.

[Milos Megis · Accepted solution]

Hi,
you can have only one ACL on interface in each direction.

But you can rewrite standard ACL into extended ACL.
Only difference is that standard ACl checks only source address and extended ACL checks source and  destination address too.
So if you have standard ACL record
permit 10.1.1.0 0.0.0.255
the equivalent for extended ACL will be
permit ip 10.1.1.0 0.0.0.255 any

Then you can apply extended ACL on interface instead of standard ACL.

[chrissnop]

Thanks Milos. :)