ACL guidelines and to keep in mind

ACL Configuration Guidelines
http://www.ccnastudyguide.net/acl-configuration-guidelines/


Cisco IOS access lists: 10 things you should know
http://www.techrepublic.com/article/cisco-ios-access-lists-10-things-you-should-know/5731134

Access Control List (ACL) filter (command)

• Access-list number    Identifies the access list using a number in the range 100 – 999 (extended IP ACL) 2000 – 2699 (expanded IP ACLs)
• Deny    Denies access if the conditions are matched
• Permit    Permits access if the conditions are match
• Remark    Indicates whether this entry allows or blocks the specified address. Could also be used to enter a remark.
• Protocol    Name or number of an internet protocol. Common keyword include ICMP IP, TCP or UDP
• Source    Number of the network or host from which the packet is being sent
• Source-wildcard    Wildcard bit to be applied to source
• Destination    Number of the network or host to which the packet is being sent
• Destination wild-card    Wildcard bit to be applied to the destination
• Port    The decimal number or name of a TCP or UDP port
• Established     For the TCP protocol only; indicates an established connection.
• Operator   
• lt (less than) 
• gt (greater than)
• eq (equal)
• neq (not equal)

Source: http://www.orbit-computer-solutions.com/Access-Control-Lists-%28ACL%29.php