《标准访问控制列表配置命令.doc》由会员分享,可在线阅读,更多相关《标准访问控制列表配置命令.doc(2页珍藏版)》请在三一文库上搜索。
1、标准访问控制列表配置命令一、拒绝PCORouter>e nableRouter#c on figure termi nalRouter(c on fig)#i nterface fastEthernet 0/0Router(c on fig-if)#ip address 192.168.0.1 255.255.255.0Router(c on fig-if)# no shutdow nRouter(c on fig-if)#exitRouter(c on fig)#i nterface fastEthernet 1/0Router(co nfig-if)#ip address 192.1
2、68.1.1 255.255.255.0Router(c on fig-if)# no shutdow nRouter(c on fig-if)#exitRouter(c on fig)#ip access-list sta ndard 1Router(co nfig-std-nacl)#de ny host 192.168.0.2Router(c on fig-std-nacl)#permit anyRouter(c on fig-std-nacl)#exitRouter(c on fig)#i nterface fastEthernet 0/0Router(c on fig-if)#ip
3、access-group 1 inRouter(c on fig-if)#exitRouter(c on fig)#i nterface fastEthernet 1/0Router(c on fig-if)#ip access-group 1 outRouter(c on fig-if)#exitRouter(c on fig)#exitRouter#write、拒绝192.168.0.0网络Router>e nableRouter#c on figure termi nalRouter(c on fig)#i nterface fastEthernet 0/0Router(c on
4、fig-if)#ip address 192.168.0.1 255.255.255.0Router(c on fig-if)# no shutdow nRouter(c on fig-if)#exitRouter(c on fig)#i nterface fastEthernet 1/0Router(co nfig-if)#ip address 192.168.1.1 255.255.255.0Router(c on fig-if)# no shutdow nRouter(c on fig-if)#exitRouter(c on fig)#ip access-list sta ndard 1
5、Router(co nfig-std-n acl)#de ny 192.168.0.0 0.0.0.255Router(c on fig-std-nacl)#permit anyRouter(c on fig-std-nacl)#exitRouter(c on fig)#i nterface fastEthernet 0/0Router(c on fig-if)#ip access-group 1 inRouter(c on fig-if)#exitRouter(c on fig)#i nterface fastEthernet 1/0Router(c on fig-if)#ip access-group 1 outRouter(c on fig-if)#exitRouter(c on fig)#exitRouter#write