ACL

Standard

Extended

Named

IP, IPX, Appletalk

applied to a interface:
  1 inbound
  1 outbound

line vty 0 4
  access-class

keywords:
established, wildcard mask, 

----------------------
time range
dynamic 
reflective / evaluate

CCIE tip:
AND all subnets
XOR all wildcard mask