discovery_routing_switching_chapter_8_en思科網(wǎng)絡(luò)技術(shù)學(xué)院ccna40官方資料-ccnadiscovery-cac建議版discovery_ppt-資料下載頁
2024-10-04 16:57本頁面
【正文】 on. ? The key phrase permit ip is used to permit all IP, including any TCP, UDP, and ICMP protocols. 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE 1 Chapter 6 42 Configuring ACLs with InterVLAN Routing ? When routing between VLANs in a work, it is sometimes necessary to control traffic from one VLAN to another using ACLs. ? Apply ACLs to VLAN interfaces or subinterfaces just as with physical interfaces 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE I Chapter 6 43 Filtering Traffic Using Access Control Lists Introducing Routing and Switching in the Enterprise – Chapter 8 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE 1 Chapter 6 44 Using Logging to Verify ACL Functionality ? Logging provides additional details on packets denied or permitted ? Add the log option to the end of each ACL statement to be tracked 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE 1 Chapter 6 45 Using Logging to Verify ACL Functionality ? Logging to the console uses router memory, which is a limited resource. Instead, configure a router to send logging messages to an external server. These messages, called syslog messages, allow the user to view them both, in real time or at a later date. 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE 1 Chapter 6 46 Using Logging to Verify ACL Functionality ? The message generates for the first packet that matches and then at 5minute intervals. ? To turn off logging, use: no logging console ? To turn off all debugging, use: undebug all ? To turn off specific debugging, such as ip packet, use: no debug ip packet 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE 1 Chapter 6 47 Analyzing Router Logs Syslog messages: ? Status of router interfaces ? ACL messages ? Bandwidth, protocols in use, configuration events 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE 1 Chapter 6 48 Analyzing Router Logs ? A sample of the mand that specifies the IP address of the host where the syslog server is installed is: logging ? When troubleshooting a problem, always set the service timestamps for logging. Be sure the router date and time are set correctly so that log files display the proper time stamp. ? Use the show clock mand to check the date and time setting. R1show clock *00:03: UTC Mon Mar 1 2022 ? To set the time zone: R1(config)clock timezone CST 6 ? To set the clock: R1clock set 10:25:00 Sep 10 2022 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE 1 Chapter 6 49 ACL Best Practices ? Always test basic connectivity before applying ACLs ? Add deny ip any to the end of an ACL when logging ? Use reload in 30 when testing ACLs on remote routers 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE 1 Chapter 6 50 Summary ? ACLs enable traffic management and secure access to and from a work and its resources ? Apply an ACL to filter inbound or outbound traffic ? ACLs can be standard, extended, or named ? Using a wildcard mask provides flexibility ? There is an implicit deny statement at the end of an ACL ? Account for NAT when creating and applying ACLs ? Logging provides additional details on filtered traffic 169。 2022 Cisco Systems, Inc. All rights reserved. Cisco Public ITE 1 Chapter 6 51
畢業(yè)設(shè)計(jì)相關(guān)推薦
鄂ICP備17016276號(hào)-1