ACL named access Control list

Named access control list configuration

Create ACL

Router (config) # ip access-list {standard | extended} access-list-name

Configure standard named ACL

Routing (config-std-nacl) # [Sequence-Number] {permit | deny} source [source-wildcard]

Configure extended named ACL

Router (config-ext-nacl) # [Sequence-Number] {permit | deny} protol {source source-wildcard destination destinationd wildcard}

[operator operan]

Standard named ACL application instance

Routing (config) # ip access-list standard ab

Routing (config-std-nacl) # permit host 192.168.1.1

Routing (config-std-nacl) # deny any

/ / only traffic from host 192.168.1.1 Universe 24 is allowed to pass

View ACL configuration information

Show access-lists

Routing (config) # 15 permit host 192.168.2.1 / add ACL statement with sequence number 15 delete the entire group ACL Routing (config) # no ip access-list {standard | extended} accsee-list-name delete a single ACL statement no Sequence-Number / / sequence number no permit host 192.168.1.1 in the group

Example

The topology is shown above

Experimental requirements: hosts in the vlan10 can access the pc4,vlan10, other hosts in the pc4,vlan10 cannot access the pc4, hosts in other network segments can access the pc4.

Experimental procedure

1 configure four PCs according to the topology diagram

2 configure switch R1

3 configure layer 3 switch R2

4 test whether the three PCs are connected to pc4

5 interworking of the whole network, making ACL access list on layer 3 switching