[上課筆記] Chapter10-ExtendedACL.pkt

Router>en

Router#config t

Router(config)#int fa 0/0

Router(config-if)#ip address 192.168.1.254 255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#exit

Router(config)#int fa 0/1

Router(config-if)#ip address 192.168.2.254

Router(config-if)#ip address 192.168.2.254 255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#exit

Router(config)#int e 0/0/0

Router(config-if)#ip address 192.168.3.254 255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#exit

Router(config)#access-list 101 deny udp host 192.168.1.250 host 192.168.3.2 eq tftp

Router(config)#access-list 101 permit icmp host 192.168.1.250 host 192.168.3.2

Router(config)#access-list 101 deny icmp 192.168.1.0 0.0.0.255 host 192.168.3.2

Router(config)#access-list 101 permit ip any any

Router(config)#int fa 0/0

Router(config-if)#ip access-group 101 in

Router(config-if)#exit

Router(config)#access 102 deny udp 192.168.2.0 0.0.0.255 host 192.168.3.2 eq tftp

Router(config)#access-list 102 deny icmp 192.168.2.0 0.0.0.255 host 192.168.3.1

Router(config)#access-list 102 permit ip any any

Router(config)#int fa 0/1

Router(config-if)#ip access-group 102 in

Router(config-if)#end

Router#