IP与交换机端口绑定.doc

IP与交换机端口绑定在Cisco catalyst 2950交换机上，通过配置extended ACL来实现端口与IP的绑定。 配置如下：2950#show runCurrent configuration : 5396 bytes!version 12.1no service padservice timestamps debug uptimeservicetimestamps log uptimeno service password-encryption!hostname 2950!enable secret 5 $1$kJ.v$gF4osmkOwfvOy7vkwI3j/.!ip subnet-zero!no ip domain-lookup!spanning-tree mode pvstno spanning-tree optimize bpdu transmissionspanning-tree extend system-idspanning-tree uplinkfast!interface FastEthernet0/1switchport access vlan 30switchport mode accessip access-group ip1 inspanning-tree portfast!interface FastEthernet0/2switchport access vlan 30switchport mode accessip access-group ip2 inspanning-tree portfast!interface FastEthernet0/3switchport access vlan 30switchport mode accessip access-group ip3 inspanning-tree portfast!interface FastEthernet0/4switchport access vlan 30switchport mode accessip access-group ip4 inspanning-tree portfast!interface FastEthernet0/5switchport access vlan 30switchport mode accessip access-group ip5 inspanning-tree portfast!interface FastEthernet0/6switchport access vlan 30switchport mode accessip access-group ip6 inspanning-tree portfast!interface FastEthernet0/7switchport access vlan 30switchport mode accessip access-group ip7 inspanning-tree portfastinterface FastEthernet0/8switchport access vlan 30switchport mode accessip access-group ip8 inspanning-tree portfast!interface FastEthernet0/9switchport access vlan 30switchport mode accessip access-group ip9 inspanning-tree portfast!interface FastEthernet0/10switchport access vlan 30switchport mode accessip access-group ip10 inspanning-tree portfast!interface FastEthernet0/11switchport access vlan 30switchport mode accessip access-group ip11 inspanning-tree portfast!interface FastEthernet0/12switchport access vlan 30switchport mode accessip access-group ip12 inspanning-tree portfast!interface FastEthernet0/13switchport access vlan 30switchport mode accessip access-group ip13 inspanning-tree portfast!interface FastEthernet0/14switchport access vlan 30switchport mode accessip access-group ip14 inspanning-tree portfast!interface FastEthernet0/15switchport access vlan 30switchport mode accessip access-group ip15 inspanning-tree portfast!interface FastEthernet0/16switchport access vlan 30switchport mode accessip access-group ip16 inspanning-tree portfast!interface FastEthernet0/17switchport access vlan 30switchport mode accessip access-group ip17 inspanning-tree portfast!interface FastEthernet0/18switchport access vlan 30switchport mode accessip access-group ip18 inspanning-tree portfast!interface FastEthernet0/19switchport access vlan 30switchport mode accessip access-group ip19 inspanning-tree portfast!interface FastEthernet0/20switchport access vlan 30switchport mode accessip access-group ip20 inspanning-tree portfast!interface FastEthernet0/21switchport access vlan 30switchport mode accessip access-group ip21 inspanning-tree portfast!interface FastEthernet0/22switchport access vlan 30switchport mode accessip access-group ip22 inspanning-tree portfast!interface FastEthernet0/23switchport access vlan 30switchport mode accessip access-group ip23 inspanning-tree portfast!interface FastEthernet0/24switchport access vlan 30switchport mode accessip access-group ip24 inspanning-tree portfast!interface GigabitEthernet0/1switchport mode trunk!interface GigabitEthernet0/2spanning-tree stack-port!interface Vlan1no ip addressno ip route-cacheshutdown!interface Vlan100ip address 2 no ip route-cache!ip default-gateway 54ip http server!ip access-list extended ip1permit ip host anyip access-list extended ip10permit ip host 0 anyip access-list extended ip11permit ip host 1 anyip access-list extended ip12permit ip host 2 anyip access-list extended ip13permit ip host 3 anyip access-list extended ip14permit ip host 4 anyip access-list extended ip15permit ip host 5 anyip access-list extended ip16permit ip host 6 anyip access-list extended ip17permit ip host 7 anyip access-list extended ip18permit ip host 8 anyip access-list extended ip19permit ip host 9 anyip access-list extended ip2permit ip host anyip access-list extended ip20permit ip host 0 anyip access-list extended ip21permit ip host 1 anyip access-list extended ip22permit ip host 2 anyip access-list extended ip23permit ip host 3 anyip access-list extended ip24permit ip host 4 anyip access-list extended ip3permit ip host anyip access-list extended ip4permit ip host anyip access-list extended ip5permit ip host anyip access-list extended ip6ip access-list extended ip5permit ip host anyip access-list extended ip6permit ip host anyip access-list extended ip7permit ip host anyip access-list extended ip8permit ip host 192.168.