第13章用访问列表初步管理概述.ppt

Slide 3 of 3 Purpose: Emphasize: Slide 1 of 3 Purpose: This slide gives another example of an extended IP access list configuration. Emphasize: Notice this example of an IP extended access list specifies a source subnet address and any destination address. Slide 2 of 3 Purpose: Emphasize: Don’t forget to include the permit statement to permit all other IP traffic out on E0. Slide 3 of 3 Purpose: Emphasize: Slide 1 of 3 Purpose: Layer 1—Shows the command syntax to declare a named IP access list. Emphasize: Show how to use named access lists, a new approach to configuring access lists in Cisco IOS software. Slide 2 of 3 Purpose: Layer 2—Adds the new configuration environment for this form of access list entry. Emphasize: Note the new prompter form shown. Enter all test condition statements without an initial access list number. The statement that begins with the word no shows how you can delete a specific test condition for IP named access lists, which is much more flexible than earlier forms. With numbered access lists, the entire list and all its statements are considered an entity. With numbered access lists, to change or delete a statement, you would first need to delete the entire numbered access list, then reenter the statements you want to keep. Example: RouterB(config)#ip access-list standard test RouterB(config-std-nacl)#permit RouterB(config-std-nacl)#end RouterB#sh ip access-list Standard IP access list test permit Slide 3 of 3 Purpose: Layer 3—Finishes with the new form of the access group command, now able to refer to an IP access list name as well as an access list number. Emphasize: Introduced with Cisco IOS Release 11.2, named access lists: Intuitively identify IP access lists using alphanumeric identifiers. Remove the limit on the number of access lists (previously 99 for IP standard and 100 for IP extended access lists). Allow per-access-list-statement deletions (previously the entire numbered a