信息点间通信，内外网络的通信都是企业网络中必不可少的业务需求，但是为了保证内网的安全性，需要通过.pptVIP

Objectives Upon completion of this chapter, you will be able to perform the following tasks: Identify the key functions and special processing of IP access lists Configure standard IP access lists Control virtual terminal access with access class Configure extended IP access lists Verify and monitor IP access lists Why Use Access Lists? Why Use Access Lists? Access List Applications Other Access List Uses Other Access List Uses Other Access List Uses Outbound Access Lists Outbound Access Lists Outbound Access Lists A List of Tests: Deny or Permit A List of Tests: Deny or Permit A List of Tests: Deny or Permit A List of Tests: Deny or Permit Access List Configuration Guidelines Access list numbers indicate which protocol is filtered One access list per interface, per protocol, per direction The order of access list statements controls testing Most restrictive statements should be at the top of list There is an implicit deny any as the last access list test—every list should have at least one permit statement Create access lists before applying them to interfaces Access list, filter traffic going through the router; they do not apply to traffic originated from the router Access List Command Overview Access List Command Overview How to Identify Access Lists How to Identify Access Lists How to Identify Access Lists Testing Packets with Standard Access Lists Testing Packets with Extended Access Lists Wildcard Bits: How to Check the Corresponding Address Bits Wildcard Bits to Match a Specific IP Host Address Wildcard Bits to Match Any IP Address Wildcard Bits to Match IP Subnets Standard IP Access List Configuration Standard IP Access List Configuration Standard IP Access List Example 1 Standard IP Access List Example 2 Standard IP Access List Example 2 Standard IP Access List Example 2 Standard IP Access List Example 3 Standard IP Access List Example 3 Filter Virtual Terminal (vty) Access to a Router Five virtual terminal lines (0 through 4) Filter addres