访问控制列表

1、1、routerl访问控制列表的设置:RouterenRouter#conf tRouter(config)#access-list 1 deny host Router(config)#access-list 1 deny 55Router(config)#access-list 1 permit anyRouter(config)#int f0/0Router(config-if)#ip access-group 1 out测试：在PC1的命令提示符下输入：PCping PCping PCping FOpin j 192.1G8.1.1Finginj with 32 bytes data:

2、Request timed out.Request timed out.Request timed out.Request timed out.Fing statiatica for 192.16S.1.1:Packet3: Sent = 4r Received = 0f Loat = 4 (100% leas)rFOpin j 192.1G8.2.1Pinging with 32 bytea cz data:Requeat timed out.Requeat timed out.Requeat timed out.Requeat timed out.Pinging with 32 bytea

3、 oz data:Requeat timed out.Reply from192. Ifi8,.2.2:bytes=32time=156msIIL=126Reply from192. Ifi8,.2.2:bytes=32time=156msIIL=126Reply from192. Ifi8,.2.2:bytes=32time=141msIIL=126Fing atatiatica for:Packets: Sent = 4r Received = 3, Loat = 1 (25% loasJ r Approximate round trip tijnea in milli-aeconds:M

4、inimum = 141msF Maximum = 15fimsF Average = 151msRouter(config-if)#no ip access-group 1 out (删除访问控制列表) 2、routerl 的设置：RouterenRouter#conf tRouter(config)#access-list 101 deny icmp ?A.B.C.D Source addressany Any source hosthostA single source hostRouter(config)#access-list 101 deny icmp any host Route

5、r(config)#access-list 101 permit icmp any anyRouter(config)#access-list 101 permit ip any anyRouter(config)#int f0/0Router(config-if)#ip access-group 101 outRouter(config-if)#exit测试：在PC0的命令提示符下输入：PCping PCpinj 192.16S.3.1Finginj with 32 bytes cz databytes=32 time=172ms IIL=126 bytes=32 time=156ms II

6、L=126 bytes=32 time=140ms IIL=126 bytes=32 time=141ms IIL=126bytes=32 time=172ms IIL=126 bytes=32 time=156ms IIL=126 bytes=32 time=140ms IIL=126 bytes=32 time=141ms IIL=126Reply fromReply fromReply fromReply from:Fing atatiatics for 192.16S.3.1:Packets: Sent = 4r Received = 4r Lost = 0 (0% loss), Ap

7、proximate round trip times in milli-seconds:Minimum = 140msr Maximum = 172msr Average = 152msPCping Pinging with 32 bytes oz data:host host host hoatunreachable.unreachable.unreachable.unreachable.host host host hoatunreachable.unreachable.unreachable.unreachable.Reply zrom 192.16S.0.2: DestinaticnR

8、eply zrom 192.16S.0.2: DestinaticnReply zrom 192.16S.0.2: DestinaticnFing statistica for :Packets: Sent = 4r Received = 0r Lost = 4 (100% loss)r3、routerl 的设置：Router(config)#access-list 102 deny ?ahp Authentication Header ProtocoleigrpCiscos EIGRP routing protocolespEncapsulation Security PayloadgreC

9、iscos GRE tunnelingicmp Internet Control Message ProtocolipAny Internet ProtocolospfOSPF routing protocoltcpTransmission Control Protocoludp User Datagram ProtocolRouter(config)#access-list 102 deny ip 55 55Router(config)#acc 102 permit ip any any4、Route 1的设置：Router(config)#acc 110 permit tcp any ?A

10、.B.C.D Destination addressany Any destination hosteqMatch only packets on a given port numbergtMatch only packets with a greater port numberhost A single destination hostlt Match only packets with a lower port numberneqMatch only packets not on a given port numberrangeMatch only packets in the range of port numbersRouter(config)#acc 110 permit tcp any