| 3.2 |  | Types of IP ACLs |
| 3.2.3 |  | IP named ACLs |

| These ACLs can be identified with an alphanumeric string, or a name, rather than a number. Named access lists allow administrators to configure more than the 99 standard IP and 100 extended IP access lists in a router. Currently, only packet and route filters can use a named list.

The advantage of using a named access list is that entries can be selectively removed. However, administrators cannot selectively add access list command lines to a specific position within an access list. Subsequent additions are still placed at the end of the list.

Consider the following before configuring named access lists:

- Access lists specified by name are not compatible with older releases.
- Not all access lists that accept a number will accept a name. Access lists for packet filters and route filters on interfaces can use a name.
- A standard named access list and an extended named access list cannot have the same name.

Figure illustrates the command syntax format for IP named ACLs.

Figure demonstrates how a named ACL can be used to block all traffic except the Telnet connection from host 10.1.1.2 to host 172.16.1.1.