|
|
ACL控制：
要求1:扩展ACL
1.1.1.1主机禁止3.3.3.1访问，其他允许
首先确认1.1.1.1路由口为F0/0.1
Router>en
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#access-list 101 deny ip host 3.3.3.1 host 1.1.1.1
Router(config)#access-list 101 permit ip any any
Router(config)#int f0/0.1
Router(config-subif)#ip access-group 101 out
Router(config-subif)#^Z
Router#
Router#
Router#sh access-list
Extended IP access list 101
deny ip host 3.3.3.1 host 1.1.1.1 (10 match(es))
permit ip any any
Router#
Router#2.0.0.0主机禁止4.0.0.0访问，其他允许
首先确认2.0.0.0路由口为F0/0.2
Router#
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#access-list 102 deny tcp 4.0.0.0 0.255.255.255 1.0.0.0 0.255.255.255
Router(config)#access-list 102 permit tcp any any
Router(config)#int f0/0.2
Router(config-subif)#ip access-g
Router(config-subif)#ip access-group 102 out
Router(config-subif)#^Z
Router#
Router#sh access-list
Extended IP access list 101
deny ip host 3.3.3.1 host 1.1.1.1 (10 match(es))
permit ip any any
Extended IP access list 102
deny ip 4.0.0.0 0.255.255.255 1.0.0.0 0.255.255.255
Router#
删除没用的ACL列表
Router(config-if)#no access-list 11
Router(config)#^Z
Router#