03-4-访问控制列表课件.ppt

第二单元;第一讲、路由概念综述 第二讲、RIP、IGRP及配置 第三讲、EIGRP、OSPF及配置 第四讲、访问控制列表 第五讲、NAT;通过本讲的学习，您应该掌握以下内容： ACL(访问控制列表)概述，ACL的执行过程。 配置标准访问控制列表。 配置扩展访问控制列表。;回顾： IP头数据格式;回顾：TCP头 数据格式;为什么使用IP访问控制列表?;访问控制列表的类型;访问控制列表－标准与扩展;访问控制列表的类型;访问控制列表－IN-ACL;Notify Sender;访问控制列表的组成;访问控制列表的应用;E0;Packets to Interface(s) in the Access Group;ACL的分类;router(config)# access-list access-list-number {permit|deny} source [mask];一些关键字;access-list 90 permit 172.16.4.0 0.0.0.255 (implicit deny all) interface ethernet 0 ip access-group 90 out;ip access-group access-list-number { in | out };access-list 101 deny tcp 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 21 access-list 101 deny tcp 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 20 access-list 101 permit ip any any (implicit deny all) (access-list 101 deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255) interface ethernet 0 ip access-group 101 out;查看访问控制列表语句;openlab#show ip int e0 Ethernet0 is up, line protocol is up Internet address is 10.1.1.11/24 Broadcast address is 255.255.255.255 Address determined by setup command MTU is 1500 bytes Helper address is not set Directed broadcast forwarding is disabled Outgoing access list is not set Inbound access list is 1 Proxy ARP is enabled Security level is default Split horizon is enabled ICMP redirects are always sent ICMP unreachables are always sent ICMP mask replies are never sent IP fast switching is enabled IP fast switching on the same interface is disabled IP Feature Fast switching turbo vector IP multicast fast switching is enabled IP multicast distributed fast switching is disabled text ommitted;命名的ACL