At this point, the access list is configured to deny source addresses from the Sales LAN access to
the Finance LAN and allow everyone else. But remember, no action will be taken until the
access list is applied on an interface in a specific direction. But where should this access list be
placed? If you place it as an incoming access list on E0, you might as well shut down the
Ethernet interface because all of the Sales LAN devices will be denied access to all networks
attached to the router. The best place to apply this access list is on the E1 interface as an
outbound list: