标准acl(1-99)
限制某个网段数据进出
网段:10.10.10.0/24 接口 f0/0
配置
ip access-list standard 10
deny 10.10.10.0 0.0.0.255
permit any
int f0/0
ip access-group 10 in
扩展acl(100-199)
限制网段间互访
网段1:10.10.10.0/24 接口 f0/0
网段2:10.10.20.0/24 接口 f0/1
配置:
ip access-list extended 100
deny ip 10.10.30.0 0.0.0.255 10.10.40.0 0.0.0.255
deny ip 10.10.40.0 0.0.0.255 10.10.30.0 0.0.0.255
permit ip any any
int f0/0
ip access-group 100 in
int f0/1
ip access-group 100 in