Access Lists - Cisco 520-T1 - Small Business Pro SR Secure Router Software Configuration Manual

Appendix B Concepts

Access Lists

Access Lists
With basic standard and static extended access lists, you can approximate session filtering by using the
established keyword with the permit command. The established keyword filters TCP packets based on
whether the ACK or RST bits are set. (Set ACK or RST bits indicate that the packet is not the first in the
session and the packet therefore belongs to an established session.) This filter criterion would be part of
an access list applied permanently to an interface.
Cisco Secure Router 520 Series Software Configuration Guide
B-9
OL-14210-01