第十章 使用访问列表管理流量（The tenth chapter uses the access list to manage traffic）.docVIP

第十章 使用访问列表管理流量（The tenth chapter uses the access list to manage traffic） The tenth chapter uses the access list to manage traffic Access list can be used to allow or deny packet through the router or refuse to allow Telnet access router (VTY), allow or deny from router Telnet access, and can create of dial to the remote site traffic. Access list profiles Access lists are basically a series of conditions for classifying packets. One of the most commonly used and easiest to use access lists is to filter the packages that you dont want to pass when implementing security policies. Important rules that data packets and access lists follow when comparing: 1. usually compares each row of the list in order of comparison. 2. compare the rows of the access list until you match the rows that match. 3. at the end of each access list is a line containing the deny statement - meaning that if the packet does not match all rows in the access list, it will be discarded. There are two types of access lists: 1. standard access list 2. extended access list 3. named access lists (based on standards and extensions) Use different access lists in the input direction and output direction of an interface: 1. input access list the party access list is accessed by the application knife from the interface, and the packets are processed by the access list before they are routed to the output interface. 2. output line access list, when the access list is applied to the packet output from the interface, the packets are routed to the output interface first, and then processed by the access list before entering the input queue of the interface. Standard access list The standard IP access list filters network traffic by using the source IP address in the IP package. You can create a standard access list using access list numbers 1-99 or 130-1999. Generally distinguished by the number of access list types. wildcard Wildcards and access lists are used to specify a host, a network, a network, or a range