managingtrafficwithaccesslis(參考版)
2025-05-26 16:09本頁(yè)面
【正文】 s GRE tunneling icmp Inter Control Message Protocol igmp Inter Gateway Message Protocol igrp Cisco39。 evaluate the packets from the top down ? Packets are pared until a match is made action ? Implicit “deny” at the end of each access list to discard packets that do not meet any criteria on the list ? Access lists must be created, then applied to an interface either: ? Inbound traffic – packets are processed through the access list before being routed to the outbound interface ? Outbound traffic – packets are routed to the outbound interface and then processed through the access list 來(lái)自 中國(guó)最大的資料庫(kù)下載 Access Lists Guidelines ? One access list per interface, per protocol, or per direction (inbound / outbound) ? Organize the access lists so more specific tests at top ? A new list added to the access list will be placed at the bottom of the list ? No single line can be removed but the whole access list ? Use permit any mand to override the “implicit” deny ? Every access list must have at least one permit statement ? Access lists only filter traffic going through the router but not originated from the router ? Place IP standard access lists as close to the destination as possible ? Place IP extended access lists as close to the source as possible 來(lái)自 中國(guó)最大的資料庫(kù)下載 Access Lists Configuration Overview ? Step 1: Set parameters for this access list test statement ? Router(config) ? accesslist accesslistnumber {permit | deny} {test conditions} ? Step 2: Enable an interface to bee part of the group that uses the specified access list ? Router(configif) ? {protocol} accessgroup accesslistnumber 來(lái)自 中國(guó)最大的資料庫(kù)下載 How to identify Access Lists ? Show runningconfig show the access lists and on which interfaces ? Show accesslist display all access lists and their configuration ? Show accesslist 110 display configuration about access list 110 ? Show ip accesslist show only the IP access lists configured ? Show ip interface show which IP interface have access list set ? Show ipx accesslist show only the IPX access lists configured ? Show ipx interface show which IPX interface have access list set Access List Type Number Range IP Standard 199 Extended Type 100 –199 IPX Standard 800 899 Extended 900 999 SAP filters 1000 1099 來(lái)自 中國(guó)最大的資料庫(kù)下載 IP Access Lists Key Concepts for IP Access Lists Standard IP Access Lists Configuration The use of Wildcards Standard IP Access Lists Example Extended IP Access Lists Configuration Extended IP Access Lists Example 來(lái)自 中國(guó)最大的資料庫(kù)下載 Key Concepts for IP Access Lists ? Standard lists (199) test conditions of all IP packets from source addresses ? Extend
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號(hào)-1