CCNA1220-第20章 访问控制列表.pptVIP

主要内容 介绍如何使用ACL 。 Objectives Upon completion of this chapter, you will be able to perform the following tasks: Identify the key functions and special processing of IP access lists Configure standard IP access lists Control virtual terminal access with access class Configure extended IP access lists Verify and monitor IP access lists 20.1 ACL 概述 1、 Why Use ACL? 1、 Why Use ACL? 2、Access List Applications Other Access List Uses Other Access List Uses Other Access List Uses Other Access List Uses 4、Outbound Access Lists 4、Outbound Access Lists 4、Outbound Access Lists A List of Tests: Deny or Permit A List of Tests: Deny or Permit A List of Tests: Deny or Permit A List of Tests: Deny or Permit 5、 Access List Configuration Guidelines Access list numbers indicate which protocol is filtered One access list per interface, per protocol, per direction The order of access list statements controls testing Most restrictive statements should be at the top of list There is an implicit deny any as the last access list test—every list should have at least one permit statement Create access lists before applying them to interfaces Access list, filter traffic going through the router; they do not apply to traffic originated from the router 6、Access List Command Overview 6、Access List Command Overview 7、How to Identify Access Lists 7、How to Identify Access Lists 7、How to Identify Access Lists 8、Testing Packets with Standard Access Lists 9、Testing Packets with Extended Access Lists Wildcard Bits: How to Check the Corresponding Address Bits Wildcard Bits to Match a Specific IP Host Address Wildcard Bits to Match Any IP Address Wildcard Bits to Match IP Subnets Standard IP Access List Configuration Standard IP Access List Configuration Standard IP Access List Example 1 Standard IP Access List Example 2 Standard IP Access List Example 2 Standard IP Access List Example 2 Standard IP Access List Example 3 Standard IP Access List Example 3 Filter Virtual Terminal (vty) Access t