Cisco Routing and Switching technology-Implementing extended access list control

Three-layer switching SW:

IP DHCP pool PC1

Network 192.168.1.0 255.255.255.0                                              650) this.width=650; "Width=" 562 " height= "356" title= "Xnglvyj (@3]%i3@l2qi~2]8.png" style= "width:372px;height:296px;float:right;" alt= " Wkiol1ub7zhjh1xhaaeew1356tq073.jpg "src=" http://s3.51cto.com/wyfs02/M00/5C/2F/ Wkiol1ub7zhjh1xhaaeew1356tq073.jpg "/>                       
 default-router 192.168.1.254                              
IP dhcp pool PC3
 network 192.168.2.0 255.255.255.0
 default-router 192.168.2.254

IP Routing

Interface FASTETHERNET0/1
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
!
Interface FASTETHERNET0/2
No Switchport
IP address 192.168.3.1 255.255.255.0
IP access-group
Duplex Auto
Speed auto

Interface Vlan1
IP address 192.168.1.254 255.255.255.0
!
Interface Vlan2
IP address 192.168.2.254 255.255.255.0
!
Router RIP
Version 2
Network 192.168.1.0
Network 192.168.2.0
Network 192.168.3.0
No auto-summary

Access-list deny TCP 192.168.1.0 0.0.0.255 host 192.168.4.1 eq www
Access-list permit IP any host 192.168.4.1

Switch Switch1:

Switch () #vlan database

Switch (VLAN) #vlan 2

Interface FASTETHERNET0/3
Switchport Access VLAN 2

ROUTER1:

IP DHCP Pool PC2
Network 192.168.4.0 255.255.255.0
Default-router 192.168.4.254

Interface fastethernet0/0
IP address 192.168.3.2 255.255.255.0
Duplex Auto
Speed auto
!
Interface FASTETHERNET0/1
IP address 192.168.4.254 255.255.255.0
Duplex Auto
Speed auto
!
Router RIP
Version 2
Network 192.168.3.0
Network 192.168.4.0
No auto-summary

Experiment Summary:

Implementation premise: All-network communication

The Knowledge points used:

1.route RIP Dynamic routing

2. Single-arm routing, trunk link

3.ip DHCP

4. Extending the Access Control list

5.vlan Virtual LAN Partitioning

This article is from the "Sunandmoon" blog, make sure to keep this source http://ssunandmoon.blog.51cto.com/10047194/1627471

Cisco Routing and Switching technology-Implementing extended access list control