← Back to Networking Courses

Course Preview

Duration
6h 59m
Difficulty
Professional
Instructor
Keith Bogart
Videos
18
Quizzes
15
Labs
3
CPE Credits
9
Published
Jul 13, 2015
Updated
Mar 07, 2026
Networking CourseCisco

Access-Lists: Beyond the Basic and Extended

This course builds on the Access Control List concepts introduced in the CCNA-level videos and takes learners into more advanced ACL features and use cases. It is designed for learners who already understand the basic purpose and structure of ACLs and now want to learn how to use them in more flexible, detailed, and practical ways. Throughout this course, you will explore advanced Access Control List capabilities used to control, filter, and monitor network traffic more effectively. The training explains how ACLs can match traffic using Layer 4 and Layer 5 information, allowing more specific control based on ports, protocols, and application-related behavior. You will also learn how to match TCP established flows, helping you understand how ACLs can permit return traffic for existing connections while maintaining tighter control over new inbound sessions. The course covers Reflexive ACLs, Dynamic ACLs, and Time-Based ACLs, showing how each feature can be used to create more adaptive and condition-based traffic filtering policies. In addition, learners will study how Object Groups can simplify ACL configuration by grouping related hosts, networks, services, or protocols. The course also explains Access List logging options, helping learners understand how to capture useful traffic information for monitoring, troubleshooting, and security visibility. By the end of this course, learners will have a stronger understanding of advanced ACL features and how to apply them in real-world Cisco network environments for improved traffic control, security, and operational visibility.

Instructor

Keith Bogart

Keith Bogart

Course Instructor

Keith started his networking career as customer service representative at Cisco Systems in 1996. His desire to learn more soon led him to a position as a Cisco Technical Assistance Center (TAC) engineer on the “Dial-Access” team, and within six months he had obtained his Dial-ISP CCIE. He later became a network consulting engineer and obtained his CCNA certification while teaching the technologies to Cisco employees during his lunch breaks. Keith was the first instructor on Cisco’s TAC Training team, where he taught a wide range of internetworking topics and later developed and taught other courses such as routing protocols, LAN switching, MPLS, 802.1x, and CCNA. After almost 17 years with Cisco, Keith joined a small startup and focused on 802.11 Wi-Fi technologies, during which time he obtained his CWNA certification. He is now very happy to be working as an instructor for Routing & Switching. Keith lives in Raleigh, North Carolina, with his wife, son, and daughter. When he is not teaching Bootcamps, Keith can be found at home with his family, reading, or working in the yard.

What Is Included

18 videos15 quizzes3 labs1 group2h 59m video runtime4h 00m activity runtime4.85 / 5 rating9 CPE credits

Skill Coverage

IP Addressing and SubnettingIP Addressing and Subnetting → IP Address Management and AssignmentIP Addressing and Subnetting → IPv4 Address Architecture and ClassesIP Addressing and Subnetting → IPv4 Addressing and PlanningNetwork Address Translation and ServicesNetwork Address Translation and Services → NAT and PAT ConfigurationNetwork Device AdministrationNetwork Device Administration → Cisco IOS and Platform AdministrationNetwork Device Administration → CLI Access and Terminal ManagementNetwork Device Administration → Interface and Physical Layer ConfigurationNetwork Monitoring and TroubleshootingNetwork Monitoring and Troubleshooting → ICMP and Transport Layer DiagnosticsNetwork Monitoring and Troubleshooting → Logging, Monitoring, and AlertingNetwork Monitoring and Troubleshooting → Network Diagnostics and TroubleshootingNetwork SecurityNetwork Security → Access Control and Policy EnforcementNetwork Security → Advanced ACL Techniques and Traffic Policy EnforcementNetwork Security → Firewall Configuration and ManagementNetworkingNetworking → IP Addressing and Subnetting → IP Address Management and AssignmentNetworking → IP Addressing and Subnetting → IPv4 Address Architecture and ClassesNetworking → IP Addressing and Subnetting → IPv4 Addressing and PlanningNetworking → Network Address Translation and Services → NAT and PAT ConfigurationNetworking → Network Device Administration → Cisco IOS and Platform AdministrationNetworking → Network Device Administration → CLI Access and Terminal ManagementNetworking → Network Device Administration → Interface and Physical Layer ConfigurationNetworking → Network Monitoring and Troubleshooting → ICMP and Transport Layer DiagnosticsNetworking → Network Monitoring and Troubleshooting → Logging, Monitoring, and AlertingNetworking → Network Monitoring and Troubleshooting → Network Diagnostics and TroubleshootingNetworking → Network Security → Access Control and Policy EnforcementNetworking → Network Security → Advanced ACL Techniques and Traffic Policy EnforcementNetworking → Network Security → Firewall Configuration and ManagementNetworking → Quality of Service → Traffic Engineering and OptimizationNetworking → Switching and Layer 2 Technologies → Switch Configuration and ManagementQuality of ServiceQuality of Service → Traffic Engineering and OptimizationSwitching and Layer 2 TechnologiesSwitching and Layer 2 Technologies → Switch Configuration and Management

Course Curriculum

Overview

2 videos

Video

Using L4/L5 extensions in ACLs

2 videos • 2 quizs

VideoQuiz

Reflexive Access-Lists (IP Session Filtering)

4 videos • 1 lab • 3 quizs

VideoQuizLab

Dynamic Access Lists - "Lock and Key"

5 videos • 1 lab • 5 quizs

VideoQuizLab

Object Groups in IOS

2 videos • 1 lab • 2 quizs

VideoQuizLab

Time-Based Access-Lists

1 video • 1 quiz

VideoQuiz

Access-List Logging

2 videos • 2 quizs

VideoQuiz