| ACLs filter all traffic through and sourced from the router. | |
| Apply the ACL to the interface prior to configuring access control entries to ensure that controls are applied immediately upon configuration. | |
| Only one ACL per protocol, per direction, and per interface is allowed. | |
| An "implicit deny" is applied to the start of the ACL entry by default. |