Standard Access List examines only the source IP ADDRESS in an IP packet to PERMIT or deny that packet. It cannot match other field in the IP packet. Standard Access List can be created using the access-list numbers 1-99 or in the expanded RANGE of 1300-1999. Standard Access List must be applied close to destination. As we are filtering based only on source address, if we put the standard access-list close to the source host or network than NOTHING would be forwarded from source.

Example:-

• R1 (config) # access-list 10 deny host 192.168.1.1
• R1 (config) # int fa0/0
• R1 (config-if) # ip access-group 10 in

Standard Access List examines only the source IP address in an IP packet to permit or deny that packet. It cannot match other field in the IP packet. Standard Access List can be created using the access-list numbers 1-99 or in the expanded range of 1300-1999. Standard Access List must be applied close to destination. As we are filtering based only on source address, if we put the standard access-list close to the source host or network than nothing would be forwarded from source.

Example:-