Course Preview
- Duration
- 6h 59m
- Difficulty
- Professional
- Instructor
- Keith Bogart
- Videos
- 18
- Quizzes
- 15
- Labs
- 3
- CPE Credits
- 9
- Published
- Jul 13, 2015
- Updated
- Mar 07, 2026
Access-Lists: Beyond the Basic and Extended
This course builds on the Access Control List concepts introduced in the CCNA-level videos and takes learners into more advanced ACL features and use cases. It is designed for learners who already understand the basic purpose and structure of ACLs and now want to learn how to use them in more flexible, detailed, and practical ways. Throughout this course, you will explore advanced Access Control List capabilities used to control, filter, and monitor network traffic more effectively. The training explains how ACLs can match traffic using Layer 4 and Layer 5 information, allowing more specific control based on ports, protocols, and application-related behavior. You will also learn how to match TCP established flows, helping you understand how ACLs can permit return traffic for existing connections while maintaining tighter control over new inbound sessions. The course covers Reflexive ACLs, Dynamic ACLs, and Time-Based ACLs, showing how each feature can be used to create more adaptive and condition-based traffic filtering policies. In addition, learners will study how Object Groups can simplify ACL configuration by grouping related hosts, networks, services, or protocols. The course also explains Access List logging options, helping learners understand how to capture useful traffic information for monitoring, troubleshooting, and security visibility. By the end of this course, learners will have a stronger understanding of advanced ACL features and how to apply them in real-world Cisco network environments for improved traffic control, security, and operational visibility.
Instructor

Keith Bogart
Course Instructor
Keith started his networking career as customer service representative at Cisco Systems in 1996. His desire to learn more soon led him to a position as a Cisco Technical Assistance Center (TAC) engineer on the “Dial-Access” team, and within six months he had obtained his Dial-ISP CCIE. He later became a network consulting engineer and obtained his CCNA certification while teaching the technologies to Cisco employees during his lunch breaks. Keith was the first instructor on Cisco’s TAC Training team, where he taught a wide range of internetworking topics and later developed and taught other courses such as routing protocols, LAN switching, MPLS, 802.1x, and CCNA. After almost 17 years with Cisco, Keith joined a small startup and focused on 802.11 Wi-Fi technologies, during which time he obtained his CWNA certification. He is now very happy to be working as an instructor for Routing & Switching. Keith lives in Raleigh, North Carolina, with his wife, son, and daughter. When he is not teaching Bootcamps, Keith can be found at home with his family, reading, or working in the yard.
What Is Included
Skill Coverage
Course Curriculum
Overview
2 videos
Using L4/L5 extensions in ACLs
2 videos • 2 quizs
Reflexive Access-Lists (IP Session Filtering)
4 videos • 1 lab • 3 quizs
Dynamic Access Lists - "Lock and Key"
5 videos • 1 lab • 5 quizs
Object Groups in IOS
2 videos • 1 lab • 2 quizs
Time-Based Access-Lists
1 video • 1 quiz
Access-List Logging
2 videos • 2 quizs
