命名访问控制列表ACL添加删除规则

《命名访问控制列表ACL添加删除规则》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、outcr>cnablc用八模式Router#configureterminal特权模式Enterconfigurationcommands,oneperline・EndwithCNTL/Z・Router(config)#interfaceFastEthernet()/O进入接口模式Router(config-if)#ipaddress192.168.1.1255.255.255.0为f()/()分配iP地址Router(config-if)#noshutdown激活端口Router(config-if)#%LlNK-5-CHANGED:In

2、terfaceFastEthernetO/O,changedstatetoup%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernet()/(),changedstatetoupRouter(config-if)#exit退岀接Uf0/0Router(config)#interfaceFastEthernetO/1Router(config-if)#ipaddress192.168.2.1255.255.255.0Router(config-if)#noshutdownRouter(con

3、fig-if)#%LlNK-5-CHANGED:InterfaceFastEthernetO/1,changedstatetoup%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernetO/UchangedstatetoupRouter(config-if)#Router(config-if)#Router(config-if)#exitRouter(config)#ipacRoutcr(config)#ipacccss-list?extendedExtendedAccessListsta

4、ndardStandardAccessListRouter(config)#ipaccess-listsRoutcr(config)#ipacccss-liststandardrcnshibu创建命名的访问控制列表Router(config-std-nacl)#denyhost192.168.1.2创建规则拒绝「I标主机Router(config-std-nacl)#%LlNEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernetO/O,changedstatetodown%LINEPROTO-5

5、-UPDOWN:LineprotocolonInterfaceFastEthernet()/(),changedstatetoup%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernetO/O,changedstatetodown%LlNEPROTO-5-UPDOWN:LineprotocolonInterfaceFastEthernetO/O,changedstatetoupRoutcr(config-std-nacl)#Router(config-std-nacl)#Router(co

6、nfig-std-nacl)#Routcr(config-std-nacl)#AZRouter#%SYS-5-C0NFIG_I:ConfiguredfromconsolebyconsoleRouter#showacRouter#showaccess-lists杳看访问控制列表StandardIPaccesslistrenshibu10denyhost192.16&1.2Router#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z・Router(config)#ipacRoutc

7、r(config)#ipaccess-listaRouter(config)#ipaccess-listsRouter(config)#ipaccess-liststandard%Incompletecommand・Router(config)#ipaccess-liststandardrenshibuRoutcr(config-std-nacl)#pRouter(config-std-nacl)#permit?A.B.C-DAddresstomatchanyAnysourcehosthostAsinglehostaddressRoutcr(

8、config-std-nacl)#j?crmithoRouter(config-std-nacl)#permithost192.168.1.3添加规则允许目标主机R