信息點間通信,內(nèi)外網(wǎng)絡(luò)的通信都是企業(yè)網(wǎng)絡(luò)中必不可少的業(yè)務(wù)需求,但是為了保證內(nèi)網(wǎng)的安全性,需要通過-資料下載頁
2025-01-08 21:27本頁面
【正文】 eric name string must be unique 169。 2022, Cisco Systems, Inc. ICND —1057 Using Named IP Access Lists Router(config) ip accesslist { standard | extended } name { permit | deny } { ip access list test conditions } { permit | deny } { ip access list test conditions } no { permit | deny } { ip access list test conditions } Router(config {std | ext}nacl) ? Feature for Cisco IOS Release or later ? Alphanumeric name string must be unique ? Permit or deny statements have no prepended number ? no removes the specific test from the named access list 169。 2022, Cisco Systems, Inc. ICND —1058 Router(config) ip accesslist { standard | extended } name Router(config {std | ext}nacl) { permit | deny } { ip access list test conditions } { permit | deny } { ip access list test conditions } no { permit | deny } { ip access list test conditions } Router(configif) ip accessgroup name { in | out } Using Named IP Access Lists ? Feature for Cisco IOS Release or later ? Alphanumeric name string must be unique ? Permit or deny statements have no prepended number ? no removes the specific test from the named access list ? Activates the IP named access list on an interface 169。 2022, Cisco Systems, Inc. ICND —1059 Access List Configuration Principles ? Order of access list statements is crucial Remended: use a text editor on a TFTP server or use PC to cut and paste ? Topdown processing Place more specific test statements first ? No reordering or removal of statements Use no accesslist number mand to remove entire access list Exception: Named access lists permit removal of individual statements ? Implicit deny all Unless access list ends with explicit permit any 169。 2022, Cisco Systems, Inc. ICND —1060 ? Place extended access lists close to the source ? Place standard access lists close to the destination E0 E0 E1 S0 To0 S1 S0 S1 E0 E0 TokenRingB A C Where to Place IP Access Lists Remended: D 169。 2022, Cisco Systems, Inc. ICND —1061 wg_ro_ashow ip int e0 Ether0 is up, line protocol is up Inter address is Broadcast address is Address determined by setup mand MTU is 1500 bytes Helper address is not set Directed broadcast forwarding is disabled Outgoing access list is not set Inbound access list is 1 Proxy ARP is enabled Security level is default Split horizon is enabled ICMP redirects are always sent ICMP unreachables are always sent ICMP mask replies are never sent IP fast switching is enabled IP fast switching on the same interface is disabled IP Feature Fast switching turbo vector IP multicast fast switching is enabled IP multicast distributed fast switching is disabled text ommitted Verifying Access Lists 169。 2022, Cisco Systems, Inc. ICND —1062 Monitoring Access List Statements wg_ro_ashow accesslists Standard IP access list 1 permit permit permit permit Extended IP access list 101 permit tcp host any eq tel permit tcp host any eq ftp permit tcp host any eq ftpdata wg_ro_ashow {protocol} accesslist {accesslist number} wg_ro_ashow accesslists {accesslist number} 169。 1999, Cisco Systems, Inc. 1063 Laboratory Exercise 169。 2022, Cisco Systems, Inc. ICND —1064 Visual Objective core_ server wg_sw_a wg_sw_l wg_pc_a wg_pc_l wg_ro_a e0/1 e0/2 e0/2 e0/1 e0 e0 fa0/23 core_sw_a wg_ro_l core_ro fa0/24 fa0/0 LL s0 s0 s1/0 s2/3 … ... TFTP Tel TFTP X X Tel X X Pod wg_ro’s s0 wg_ro’s e0 wg_sw A B C D E F G H I J K L 169。 2022, Cisco Systems, Inc. ICND —1065 Summary After pleting this chapter, you should be able to perform the following tasks: ? Identify the key functions and processing of IP access lists ? Configure standard IP access lists ? Control vty access with an access class ? Configure extended IP access lists ? Verify and monitor IP access lists 169。 2022, Cisco Systems, Inc. ICND —1066 Review Questions 1. What are the two types of IP access lists? 2. What is the last statement in all access lists? 3. What mand do you use to apply an access list to a vty port?
試題試卷相關(guān)推薦
鄂ICP備17016276號-1