Access lists are processed in sequential, logical order, evaluating packets from the top down, ONE statement at a time. As soon as a match is made, the permit or DENY option is APPLIED, and the PACKET is not evaluated against any more access list statements. Because of this, the order of the statements within any access list is SIGNIFICANT. There is an implicit “deny” at the end of each access list which means that if a packet does not match the condition on any of the lines in the access list, the packet will be discarded.

Access lists are processed in sequential, logical order, evaluating packets from the top down, one statement at a time. As soon as a match is made, the permit or deny option is applied, and the packet is not evaluated against any more access list statements. Because of this, the order of the statements within any access list is significant. There is an implicit “deny” at the end of each access list which means that if a packet does not match the condition on any of the lines in the access list, the packet will be discarded.