ACLaccess control line 访问控制列表

1、R1#show access-list 1 查看访问控制列表1R1#show access-list 查看所有的访问控制列表R1(config)#access-list 1 permit anyR1#show access-list 1R1(config)#no access-list 1R1(config-if)#ip access-group 1 outR1#show ip interface serial 1/0R1(config-if)#ip access-group 100 in拒绝pc1网段ping pc2网段R1(config-if)#ip access-group 100 in

2、拒绝pc1 telnet pc2R1(config)#interface ethernet 0/0R1(config-if)#ip access-group 100 inR1(config)#interface ethernet 0/0R1(config-if)#ip access-group 100 in控制vty的访问R1(config-line)#access-class 1 inR2(config)#line vty 0 4R2(config-line)#loginR2(config-line)#access-class 1 outR1(config-line)#interface e

3、thernet 0/0R1(config-if)#ip access-group 100 innamed访问控制列表standardR1(config)#ip access-list standard wisdomR1(config)#line vty 0 4R1(config-line)#loginR1(config-line)#access-class wisdom inR1(config)#no ip access-list standard wisdomextendedR1(config)#ip access-list extended wisdomR1(config-ext-nacl

4、)#exitR1(config)#interface ethernet 0/0R1(config-if)#ip access-group wisdom inpc1 E0/0 R1 E1/0pc2 E0/0 R2 E1/0R1 S0/0 R2 S0/1R1(config)#access-list 1 permit anyR1(config)#interface serial 0/0R1(config-if)#ip access-group 1 inR1(config)#interface ethernet 1/0R1(config-if)#ip access-group 1 outR1(conf

5、ig)#interface serial 0/0R1(config-if)#ip access-group 100 inR1#show ip interface serial 0/0R1#show access-listR1#show access-list 100R1(config)#interface serial 0/0R1(config-if)#ip access-group 100 inR1(config)#no access-list 100R1(config)#access-list 100 permit ip any anyR1(config)#interface serial

6、 0/0R1(config-if)#ip access-group 100 inR1(config)#line vty 0 4R1(config-line)#loginR1(config-line)#access-class 1 inR1(config)#ip access-list standard wisdomR1(config-std-nacl)#permit anyR1(config)#interface serial 0/0R1(config-if)#ip access-group wisdom inR1(config)#ip access-list extended wisdomR1(config-ex