网络设备配置与管理 任务2 控制子网间的访问 电子课件(8).ppt

Routing Switching www.BenZ Routing Switching (Rev 1.1 Aug. 2001) * Slide 1 of 2 Purpose: The access-list command creates an entry in complex traffic filter list. Emphasize: The access-list field descriptions: list—a number between 100 and 199 protocol—ip, tcp, udp, icmp, igrp, eigrp, ospf and etc……. ip = any internet protocol (see note below) source—ip address source-mask—wildcard-mask of address bits that must match. 0s indicate bits that must match, 1s are dont care. destination—ip address destination-mask—wildcard-mask operator—lt, gt, eq, neq operand—a port number or application name (i.e. “23” or “telnet”) established-only allow established tcp session coming in (ack or rst bit must be set) log-generates a console message when a packet matches the access-list statement Note: If the protocol number is not listed, you may enter the protocol number between 1-255. Routing Switching www.BenZ Routing Switching (Rev 1.1 Aug. 2001) * Slide 1 of 2 Purpose: The access-list command creates an entry in complex traffic filter list. Emphasize: The access-list field descriptions: list—a number between 100 and 199 protocol—ip, tcp, udp, icmp, igrp, eigrp, ospf and etc……. ip = any internet protocol (see note below) source—ip address source-mask—wildcard-mask of address bits that must match. 0s indicate bits that must match, 1s are dont care. destination—ip address destination-mask—wildcard-mask operator—lt, gt, eq, neq operand—a port number or application name (i.e. “23” or “telnet”) established-only allow established tcp session coming in (ack or rst bit must be set) log-generates a console message when a packet matches the access-list statement Note: If the protocol number is not listed, you may enter the protocol number between 1-255. Routing Switching www.BenZ Routing Switching (Rev 1.1 Aug. 2001) * Slide 1 of 2 Purpose: The access-list command creates an entry in complex traffic filter list. Emphasize: The access-list field descriptio