【红头发CCNA视频配套PPT】第13章IP访问控制列表.pptVIP

host 55 /16 Slide 1 of 1 Purpose: Emphasize: This graphic shows students how to use the wildcard any abbreviation. This abbreviation means ignore any bit value in all bit positions, which has the effect of matching anything in all bit positions. access-list 1 permit 55 no access-list 1 permit 55 (access-list 1 deny any) /16 Slide 2 of 2 Purpose: This layer shows the ip access-group command. Emphasize: The ip access-group command links an access list to an interface. Only one access list per interface per direction per protocol is allowed. The ip access-group field descriptions: list—number of the access-list to be linked to this interface. direction - default in outbound.Note: Create the access-list first before applying it to the interface. If it is applied to the interface before it is created, the action will be to permit all traffic. However, as soon as you create the first statement in the access list, the access list will be active on the interface. Since there is the implicit deny all at the end of every access list, the access-list may cause most traffic to be blocked on the interface. To remove an access-list, remove it from all the interfaces first, then remove the access-list. In older version of IOS, removing the access-list without removing it from the interface can cause problems. Slide 1 of 2 Purpose: This slide gives a specific TCP/IP example of a standard access list configuration. Emphasize: Describe each part of the standard access list to your students. The blue statements represent the implicit deny all. A good way to teach this material is to start with another similar configuration on the board. Set goals that will result in the example and have students tell you how to configure it. Have the students tell you what to write. After the configuration correct on the board, use the slide to review. Slide 2 of 2 Purpose: Emphasize: Because of the implicit deny all, all non 172.16.x.x traffic are block