关于Hands On Labs-ACL

菜菜

NC_2960_WH#show run hostname NC_2960_WH ! access-list 99 permit host 192.168.100.33 access-list 99 permit host 192.168.100.130 ! line vty 0 15 access-class 99 in exec-timeout 5 30 logging synchronous login local ! end 复制代码 NC_3560_BJ#show run hostname NC_3560_BJ ! interface Vlan2 ip address 192.168.100.126 255.255.255.224 ip access-group 100 out ! ip access-list standard MGT permit 192.168.100.128 0.0.0.11 ! access-list 100 permit tcp 192.168.100.0 0.0.0.255 host 192.168.100.100 eq www access-list 100 deny tcp any host 192.168.100.100 eq www access-list 100 permit ip any any ! line vty 0 15 access-class MGT in exec-timeout 5 30 logging synchronous login local transport input ssh ! end 复制代码 NC_2960_SH#show run hostname NC_2960_SH ! access-list 99 permit host 192.168.100.65 access-list 99 permit host 192.168.100.130 ! line vty 0 15 access-class 99 in exec-timeout 5 30 logging synchronous login local ! end 复制代码 NC_2811_WH#show run hostname NC_2811_WH ! ip access-list standard MGT permit 192.168.100.128 0.0.0.11 ! line vty 0 15 access-class MGT in exec-timeout 5 30 logging synchronous login local transport input ssh ! end 复制代码 NC_2811_BJ#show run hostname NC_2811_BJ ! interface FastEthernet0/0 ip address 192.168.100.222 255.255.255.224 ip ospf priority 255 ip access-group Web in ip nat inside duplex auto speed auto ! interface Serial0/0/0 ip address 192.168.100.226 255.255.255.252 ip access-group Web in ip nat inside clock rate 128000 ! interface Serial0/1/0 ip address 192.168.100.230 255.255.255.252 ip access-group Web in ip nat inside clock rate 128000 ! access-list 1 permit 192.168.100.0 0.0.0.255 ! ip access-list standard MGT permit 192.168.100.128 0.0.0.11 ! ip access-list extended Web deny tcp 192.168.100.0 0.0.0.254 host 101.101.4.100 eq www permit ip any any ! line vty 0 15 access-class MGT in exec-timeout 5 30 logging synchronous login local transport input ssh ! end 复制代码 NC_2811_SH#show run hostname NC_2811_SH ! ip access-list standard MGT permit 192.168.100.128 0.0.0.11 ! line vty 0 15 access-class MGT in exec-timeout 5 30 logging synchronous login local transport input ssh ! end 复制代码 ISP#show run hostname ISP ! interface Serial0/2/0 ip address 100.100.100.100 255.255.255.0 ip access-group ISP in no cdp enable clock rate 128000 ! ip access-list standard ISP permit 150.150.150.0 0.0.0.255 ! end 复制代码

本文摘自于http://www.netconfed.com

abc873664730

c4919654

逸徵羽

感谢楼主分享，谢谢！