+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
access-list逐条匹配,满足条件即转发,因此access-list的过滤顺序非常重要
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
使用形式:
access-list[list number][permit关键字|deny关键字][specified_address][log]
[specified_address]:
[host关键字 source_address | any关键字]
[address] [wildcard mask]
扩展型使用形式:
access-list[list number][permit|deny][protocol][source specified_address][source port][destination specified_address][destination port][log options]
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
要点注意:
标准型IP访问列表list-number范围:0~99
扩展型IP访问列表list-number范围:100~199
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
使用实例:
eg01.指定网络允许其数据包通过:access-list 1 permit 192.46.28.0 0.0.0.255
eg02.指定主机允许其数据包通过:access-list 1 permit 192.46.28.123 0.0.0.0[或access-list 1 permit host 192.46.28.123]
eg03.允许所有数据包通过:access-list 1 permit 0.0.0.0 255.255.255.255[或access-list permit any]
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
生效命令:
>>interface f0/1
>>ip access-group 1 in/out
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
说明:
只需要根据数据包的源地址进行过滤时,请采用标准型IP访问列表
如果需要根据更高级的规则实现过滤,则采用扩展型IP访问列表
在创建通配符掩码的时候,二进制0表示匹配,二进制1表示不匹配
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
access-list逐条匹配,满足条件即转发,因此access-list的过滤顺序非常重要
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
使用形式:
access-list[list number][permit关键字|deny关键字][specified_address][log]
[specified_address]:
[host关键字 source_address | any关键字]
[address] [wildcard mask]
扩展型使用形式:
access-list[list number][permit|deny][protocol][source specified_address][source port][destination specified_address][destination port][log options]
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
要点注意:
标准型IP访问列表list-number范围:0~99
扩展型IP访问列表list-number范围:100~199
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
使用实例:
eg01.指定网络允许其数据包通过:access-list 1 permit 192.46.28.0 0.0.0.255
eg02.指定主机允许其数据包通过:access-list 1 permit 192.46.28.123 0.0.0.0[或access-list 1 permit host 192.46.28.123]
eg03.允许所有数据包通过:access-list 1 permit 0.0.0.0 255.255.255.255[或access-list permit any]
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
生效命令:
>>interface f0/1
>>ip access-group 1 in/out
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
说明:
只需要根据数据包的源地址进行过滤时,请采用标准型IP访问列表
如果需要根据更高级的规则实现过滤,则采用扩展型IP访问列表
在创建通配符掩码的时候,二进制0表示匹配,二进制1表示不匹配
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++