《Extended ACL_扩展访问控制列表》由会员分享，可在线阅读，更多相关《Extended ACL_扩展访问控制列表（4页珍藏版）》请在金锄头文库上搜索。
1、hhhhhmhRT1Routervenab-eRouter#conftRouter(config)#hostnameRT1RTl(config)*interfacefastEthernet1、1RTl(config.f)#noshutdownRTl(config.fspaddress19216810.254255.255.2550RTl(config.f)#exitRTl(config)*interfacefastEthernet0、0RTl(config.f)#noshutdownRTl(config.fspaddress1212121255.255.2550RTl(config.f)#ex
2、itRTl(config)#Routervenab-eRouter#conftRouter(config)#hostnameRT2RT2(config)#iinterfacefastEthernet0、0RT2(config.fspaddress121212.2255.255.2550RT2(config.f)#noshutdownRT2(config.f)#exitRT2(config)#iinterfacefastEthernet1、1RT2(config.f)#noshutdownRT2(config.fspaddress19H168.20.254255.255.2550RT2(conf
3、ig.f)#exitRT2(config)#RT1RT1（config）#iproute192.168.20.0255.255.255.012.12.12.2RT2RT2（config）#iproute192.168.10.0255.255.255.012.12.12.1ACL配置第一种方法RT1RT1（config）#access-list101（扩展ACL100199随意取值）permittcp（协议）host192.168.10.1（源主机）host192.168.20.1（目的主机）eq（目的主机）www允许www访问RT1（config）#access-list101deny（禁止）
4、icmp（*协议）host192.168.10.1host192.168.20.1echo（ping的含义）-禁止pingRT1（config）#interfacefastEthernet0/0=将ACL规则应用到接口RT1（config-if）#ipaccess-group101out（应用在出口方向）=ACL配置第二种方法2u21XMFIT2XServer-PTSERVER如何在RT2上应用ACL规则？192.168.20.1255.255.255.0192.168.20.254192.168.10.1255.255.255.0192.16S.10.254pQ-pyPC1=底层配置SW1S
5、witchenableSwitch#configureterminalSwitch（config）#hostnameSW1SW1(config)#vlan10SW1(config-vlan)#exSW1(config)#interfacefastEthernet0/1SW1(config-if)#noshutdownSW1(config-if)#switchportmodeaccessSW1(config-if)#switchportaccessvlan10SW1(config-if)#exitSW1(config)#interfacevlan10SW1(config-if)#noshutdo
6、wnSW1(config-if)#ipaddress192.168.10.254255.255.255.0SW1(config-if)#exSW1(config)#vlan20SW1(config-vlan)#exSW1(config)#interfacefastEthernet0/2SW1(config-if)#noshutdownSW1(config-if)#switchportmodeaccessSW1(config-if)#switchportaccessvlan20SW1(config-if)#exSW1(config)#interfacevlan20SW1(config-if)#n
7、oshutdownSW1(config-if)#ipaddress12.12.12.1255.255.255.0SW1(config-if)#exSW2SwitchenableSwitch#configureterminalSwitch(config)#hostnameSW2SW2(config)#vlan30SW2(config-vlan)#exSW2(config)#interfacefastEthernet0/2SW2(config-if)#noshutdownSW2(config-if)#switchportmodeaccessSW2(config-if)#switchportacce
8、ssvlan30SW2(config-if)#exitSW2(config)#interfacevlan30SW2(config-if)#noshutdownSW2(config-if)#ipaddress12.12.12.2255.255.255.0SW2(config-if)#exSW2(config)#vlan40SW2(config-vlan)#exSW2(config)#interfacefastEthernet0/1SW2(config-if)#noshutdownSW2(config-if)#switchportmodeaccessSW2(config-if)#switchpor
9、taccessvlan40SW2(config-if)#exSW2(config)#interfacevlan40SW2(config-if)#noshutdownSW2(config-if)#ipaddress192.168.20.254255.255.255.0SW2(config-if)#ex=静态路由配置SW1SW1(config)#iproute192.168.20.0255.255.255.012.12.12.2SW2SW2(config)#iproute192.168.10.0255.255.255.012.12.12.1=acl配置第一种方法SW1SW1(config)#acc
10、ess-list101permittcphost192.168.10.1host192.168.20.1eqwwwSW1(config)#access-list101denyicmphost192.168.10.1host192.168.20.1echoSW1(config)#interfacevlan20SW1(config-if)#ipaccess-group101out=AcL配置第二种方法如何在SW2上应用ACL规则？应用护展ACL使得FCL可以访问w册服务器，但不能pinglSERmVLAJJ20VLMT3012.12.12.2FaO/2192.163.10.1255.255.255.0192.16S.10.254pC.pr12.1.1.1FaO/21验证：IO可以网页诟问甘和服务器但不能P皿服劳器192.168.20.1255.255.255.0192.168.20.254Server-PTSERVER.
