Standard ACL Logic
In the figure, packets that enter the router through interface G0/0 are checked for their source addresses based on the following entries:
access-list 2 deny 192.168.10.10
access-list 2 permit 192.168.10.0 0.0.0.255
access-list 2 deny 192.168.0.0 0.0.255.255
access-list 2 permit 192.0.0.0 0.255.255.255
If packets are permitted, they are routed through the router to an output interface. If packets are denied, they are dropped at the incoming interface.