Sie sind auf Seite 1von 11

ACCESS CONTROL LISTs

Standard ACL Extended ACL


Range : 1-99 Range : 100 -199
General Specific
Source Address only Source and Destination
address
Applied close to destination Applied close to Source
Filters Complete Protocol
Suite
Can filter one protocol out of
complete protocol suite
C#(config) access-list 10 deny 2.1.1.1 0.0.0.0
C#(config) access-list 10 permit any

C#(config) int ser 1/0
C#(config-if) ip access-group 10 in
B#(config) access-list 101 deny tcp 200.100.100.1 0.0.0.0
200.100.150.100 0.0.0.0 eq telnet
B#(config) access-list 101 permit ip any any

B#(config) int ser 1/0
B#(config-if) ip access-group 101 out
Create a Named Standard ACL on R2 that should deny packets sourced by host 1.1.1.1
and apply the list to fa 0/0

Das könnte Ihnen auch gefallen