Why can't we place the Extended ACL close to the destination not the source ? What will happen if we do so ?

  • Typically, you want standard ACLs as close to the destination as possible in order to prevent dropping too much traffic, and you want to place an extended ACL as close to the source as possible in order to not router traffic that is destined to be dropped because that wastes router resources.
    – Ron Maupin
    Sep 9, 2019 at 15:22

1 Answer 1


You can place an extended ACL where you want (as long as it is in the path of the packet you want to filter of course). However, depending on the filtering parameters, it is usually better to put it close to the source. This way, undesirable traffic is denied close to the source network without crossing the network infrastructure, which limit bandwidth usage.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.