CISCO ACL+重分布.docVIP

ACL 1 标准ACL（1-99）只能匹配流量，按IP匹配 标准ACL是基于目的做过滤 access-list 1 deny ip mask Access-list 1 permit any Int s0/0 Ip access-group 1 in 2 扩展ACL（100-199）源与目的都匹配，ip+协议 基于源做过滤 例如过滤www. telnet，路由去上那个接口上连接了设备就就在那个接口是哪个做ACL，不能过滤本地出去的流量。 Access-list 100 permit tcp 源ip 掩码 host 目的ip eq www Access-list 100 permit tcp 源ip 掩码 host 目的RID eq www Access-list 100 permit tcp 源ip 掩码 host 目的ip eq www Access-list 100 permit tcp 源ip 掩码 host 目的ip eq telnet Access-list 100 permit tcp 源ip 掩码 host 目的RID eq telnet Access-list 100 permit tcp 源ip 掩码 host 目的ip eq telnet Int s0/0 Ip access-group 100 in ip name-server 8 Access-list 100 deny ip any host //禁止访问百度 不让莫个设备PING此路由器 Access-list 101 deny icmp 源ip 掩码 host 目的ip/rid log Access-list 101 permit ip any any Int g0/0 Ip access-group 101 in 3 命名ACL Ip access-list standard 名字 //标准的ACL Deng ip mask Permit any Int s0/0 Ip access-group stand in/out Ip access-list extandard 名字 //扩展ACL Deng tcp 源ip mask host 目的ip eq telnet Permit ip any any Int s0/0 access-group 名字 in/out Ip access-list g 4 基于时间的ACL r4(config)#time-range time //定义事件范围 r4(config-time-range)#periodic weekdays 8:00 to 13:42 r4(config)#access-list 111 deny icmp 55 host eq log time-range 5 动态ACL prefix-list...匹配路由 R4-------------R2---------------R1------------R3 24之间跑OSPF区域0； 12之间跑OSPF区域1； 13之间跑EIGRP R4配置 interface Loopback0 ip address ip ospf network point-to-point ! interface Loopback1 ip address 4 55 ip ospf network point-to-point ! interface Serial0/0 ip address router ospf 1 router-id network area 0 network 55 area 0 network 55 area 0 network 4 area 0 R2配置 interface Serial0/0 ip address interface Serial0/1 ip address router ospf 1 router-id network 55 area 0 network 55 area 1 network 55 area 0 default-information originate always 区域0到区域1走一条默认路由 R1配置 interface Serial0/0 ip address interface Serial0/1 ip address router eigrp 1 network 55 no auto-summary router ospf 1 router-id network area 1 network