1、ACL訪(fǎng)問(wèn)控制列表ACL的匹配規(guī)則標(biāo)準(zhǔn)ACL的應(yīng)用與配置：請(qǐng)?jiān)O(shè)計(jì)使用標(biāo)準(zhǔn)ACL拒絕通信源子網(wǎng)對(duì)服務(wù)器A所在子網(wǎng)的所有訪(fǎng)問(wèn)，但是允許服務(wù)器B和C所在的子網(wǎng)。ACL應(yīng)該應(yīng)用于哪臺(tái)路由器的哪個(gè)接口。路由器每個(gè)接口配置IP，PC與服務(wù)器配置IP,路由器配置rip。略過(guò)在R2的f1/0做ACL：R2(config)#access-list 1 deny 55R2(config)#access-list 1 permit any R2(config)#int f1/0R2(config-if)#ip access-group 1 out R2(c

2、onfig-if)#ex 現(xiàn)在在R2上配置6個(gè)換回接口，通過(guò)做一條ACL配置來(lái)達(dá)到禁止訪(fǎng)問(wèn)1 .3 .5網(wǎng)絡(luò)：R1(config)#access-list 1 deny 55R1(config)#access-list 1 permit any R1(config)#int f0/0R1(config-if)#ip access-group 1 out擴(kuò)展ACL的應(yīng)用與配置：R1:nterface FastEthernet0/0 ip address ip access-group

3、 101 in duplex auto speed auto!interface FastEthernet1/0 ip address duplex auto speed auto!interface FastEthernet2/0 ip address duplex auto speed auto!router rip version 2 network network network no auto-summary!

4、no ip http serverno ip http secure-server!access-list 101 deny icmp 55 host access-list 101 permit tcp 55 host eq wwwaccess-list 101 permit icmp 55 host access-list 101 permit icmp 55 host 1

5、access-list 101 permit udp any any eq rip!新版本在兩條ACL語(yǔ)句中插入一條配置如下：命名ACL的應(yīng)用與配置：思科的高級(jí)訪(fǎng)問(wèn)控制功能(1) 配置帶時(shí)間的ACL:(2) 動(dòng)態(tài)訪(fǎng)問(wèn)控制列表首先客戶(hù)端對(duì) 進(jìn)行Telnet此時(shí)客戶(hù)端就可以ping同服務(wù)器：并且路由器R1多了一條臨時(shí)ACL：R1#show ip acceExtended IP access list 101 10 permit tcp any host eq telnet (57 matches) 20 Dynamic ccna permit ip any host permit ip hos