信息點(diǎn)間通信,內(nèi)外網(wǎng)絡(luò)的通信都是企業(yè)網(wǎng)絡(luò)中必不可少的業(yè)務(wù)需求,但是為了保證內(nèi)網(wǎng)的安全性,需要通過(存儲(chǔ)版)
【正文】 protocol is up Inter address is Broadcast address is Address determined by setup mand MTU is 1500 bytes Helper address is not set Directed broadcast forwarding is disabled Outgoing access list is not set Inbound access list is 1 Proxy ARP is enabled Security level is default Split horizon is enabled ICMP redirects are always sent ICMP unreachables are always sent ICMP mask replies are never sent IP fast switching is enabled IP fast switching on the same interface is disabled IP Feature Fast switching turbo vector IP multicast fast switching is enabled IP multicast distributed fast switching is disabled text ommitted Verifying Access Lists 169。 2022, Cisco Systems, Inc. ICND —1053 ? Deny only Tel from sub out of E0 ? Permit all other traffic Extended Access List Example 2 E0 S0 E1 Non accesslist 101 deny tcp any eq 23 169。 2022, Cisco Systems, Inc. ICND —1045 Virtual Terminal Access Example ? Permits only hosts in work to connect to the router’s vtys accesslist 12 permit ! line vty 0 4 accessclass 12 in Controlling Inbound Access 169。 2022, Cisco Systems, Inc. ICND —1037 Standard IP Access List Example 2 E0 S0 E1 Non Deny a specific host accesslist 1 deny accesslist 1 permit (implicit deny all) (accesslist 1 deny ) 169。 2022, Cisco Systems, Inc. ICND —1029 ? Accept any address: ? Abbreviate the expression using the keyword any Test conditions: Ignore all the address bits (match any) (ignore all) Any IP address Wildcard mask:Wildcard Bits to Match Any IP Address 169。 2022, Cisco Systems, Inc. ICND —1021 Step 1: Set parameters for this access list test statement (which can be one of several statements) Router(config) Step 2: Enable an interface to use the specified access list { protocol } accessgroup accesslistnumber {in | out} Router(configif) Access List Command Overview IP Access lists are numbered 199 or 100199 accesslist accesslistnumber { permit | deny } { test conditions } 169。 2022, Cisco Systems, Inc. ICND —1014 Notify Sender Outbound Access Lists If no access list statement matches then discard the packet N Y Packet Discard Bucket Choose Interface Routing Table Entry ? N Y Test Access List Statements Permit ? Y Access List ? Discard Packet N Outbound Interfaces Packet Packet S0 E0 Inbound Interface Packets 169。 2022, Cisco Systems, Inc. ICND —106 Queue List Priority and custom queuing Other Access List Uses Special handling for traffic based on packet tests 169。 2022, Cisco Systems, Inc. 101 Chapter 10 Basic IP Traffic Management with Access Lists 169。 2022, Cisco Systems, Inc. ICND —109 What Are Access Lists? ? Standard – Checks Source address – Generally permits or denies entire protocol suite Outgoing Packet E0 S0 Ining Packet Access List Processes Permit? Source 169。 2022, Cisco Systems, Inc. ICND —1017 A List of Tests: Deny or Permit Packets to Interface(s) in the Access Group Packet Discard Bucket Y Interface(s) Destination Deny Deny Y Match First Test ? Permit N Deny Permit Match Next Test(s) ? Deny Match Last Test ? Y Y N Y Y Permit 169。 2022, Cisco Systems, Inc. ICND —1024 Number Range/Identifier IP 199 100199, 13001999, 20222699 Name (Cisco IOS and later) 800899 900999 10001099 Name (Cisco IOS . F and later) Standard Extended SAP filters Named Standard Extended Named Access List Type IPX How to Identify Access Lists ? Standard IP lists (1 to 99) test conditions of all IP packets from source addresses ? Extended IP lists (100 to 199) can test conditions of source and destination addresses, specific TCP/IP protocols, and destination ports ? Other access list number ranges test conditions for other working protocols 169。 2022, Cisco Systems, Inc. ICND —1032 Standard IP Access List Configuration accesslist accesslistnumber {permit|deny} source [mask] Router(config) ? Sets parameters for this list entry ? IP standard access lists use 1 to 99 ? Default wildcard mask = ? “no ac
試題試卷相關(guān)推薦
鄂ICP備17016276號-1