There are also changes in configuration between numbered and named ACLs. The most significant distinction is that the global command used by named ACLs puts the user in a named IP access list sub mode, where matching and actions permit or deny logic can be specified.