CHP6 访问控制列表.ppt

acl 4000 rule 10 deny l2-protocol arp destination-mac 5489-9862-2FF8 ffff-ffff-ffff source-mac 5489-9803-2C28 ffff-ffff-ffff rule 20 deny source-mac 5489-9862-2FF8 ffff-ffff-ffff destination-mac ffff-ffff-ffff ffff-ffff-ffff acl number 3000 rule 10 permit tcp destination 0 0 destination-port eq www rule 20 deny ip q acl number 3001 rule 10 permit ip source 55 rule 20 deny ip q firewall zone inside priority 10 q firewall zone outside priority 5 q interface GigabitEthernet0/0/0 ip address zone inside q interface GigabitEthernet0/0/1 ip address zone outside q firewall