Vroacl ACL Access Control List

Router ACL Access Control List, used to control network rules and traffic through interfaces. One excuse is that only one control list www.2cto.com can be applied in one direction ~ 99) control the extended control list based on the source IP address (serial number 100 ~ 199) based on source and target addresses,

Router ACL Access Control List, used to control network rules and traffic through interfaces. One excuse is that only one control list www.2cto.com can be applied in one direction ~ 99) control the extended control list based on the source IP address (serial number 100 ~ 199) based on source and target addresses,

VroACLAccessControlList

ACLAccessControlList, Applied to the interfaceControlNetwork Rules and traffic. One excuse can only apply one directionControlListWww.2cto.com

StandardControlList(Serial number 1 ~ 99) mainly based on the source IP addressControl

ExtensionControlList(Serial No. 100 ~ 199) based on source and target addresses, transport layer protocol, and application port numberControl

NameControlListData is replaced by a name.ControlList

StandardControlListConfigure an instance

CreateAccessControlList

Router # access-list 1 deny 172.16.4.13 0.0.0.0 block a host (available host)

Router # access-list 1 permit 172.16.0.0 0.0.255.255

Router # aceess-list 1 permit 0.0.0.0 255.255.255.255.255 allow all

Application to interface

Router (config-if) # ip access-group 1 out/in direction

ExtensionControlListConfigure an instance

CreateAccessControlList

Protocol source address, target address, and other ports

Router (config) # access-list 101 deny tcp 172.16.4.0 0.0.0.255 172.16.3.0 0.0.255 eq 21

Router (config) # access-list 101 permit ip any allows all

Application to interface

Router (config-if) # ip access-grouup 101 out/in

NameControlListConfigure the instance www.2cto.com

Create a nameControlList

Router (config) # ip access-list extended xiaoliu name: xiaoliu

Router (config-ext-nacl) # deny tcp 172.16.4.0 0.0.0.255 172.16.3.0 0.0.0.255 eq 23

Router (config-ext-nacl) # permit ip any

Application to interface

Rouer (config-if) ip access-group xiaoliu out/in

Router # show ip interfaceControlListInformation

Router # show access-list ViewControlList

Note: 1. Use of the anti-subnet mask

2. After blocking is configured, you must configure to allow all.