@robinandjiang wrote: ip access-list extended Block_Vlanpermit ip 192.168.20.0 0.0.0.255 anydeny ip any any In this ACL, the router will first check traffic against the first permit statement "permit ip 192.168.20.0 0.0.0.255 any". (If the source IP ...