If a packet enters or exits an interface with an ACL applied, the packet is compared against standards of the ACL. When the packet matches the first line within the ACL, proper "permit" or "deny" action is steered. If there is no match, next line's...
