ACL的一些总结

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
access-list逐条匹配，满足条件即转发，因此access-list的过滤顺序非常重要
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
使用形式：
access-list[list number][permit关键字|deny关键字][specified_address][log]
[specified_address]：
[host关键字 source_address | any关键字]
[address] [wildcard mask]
扩展型使用形式：
access-list[list number][permit|deny][protocol][source specified_address][source port][destination specified_address][destination port][log options]
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
要点注意：
标准型IP访问列表list-number范围：0~99
扩展型IP访问列表list-number范围：100~199
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
使用实例：
eg01.指定网络允许其数据包通过：access-list 1 permit 192.46.28.0 0.0.0.255
eg02.指定主机允许其数据包通过：access-list 1 permit 192.46.28.123 0.0.0.0[或access-list 1 permit host 192.46.28.123]
eg03.允许所有数据包通过：access-list 1 permit 0.0.0.0 255.255.255.255[或access-list permit any]
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
生效命令：
>>interface f0/1 
>>ip access-group 1 in/out
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
说明：
只需要根据数据包的源地址进行过滤时，请采用标准型IP访问列表
如果需要根据更高级的规则实现过滤，则采用扩展型IP访问列表
在创建通配符掩码的时候，二进制0表示匹配，二进制1表示不匹配
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++