Shulou(Shulou.com)06/01 Report--

ACL list Editing:

1. Create an ACL list

R1 (config) # access-list 101 deny tcp 11.1.1.0 0.0.255 192.168.1.0 0.0.255 eq 23

R1 (config) # access-list 101 deny icmp 11.1.1.3 0.0.0.0 host 192.168.1.1

R1 (config) # access-list 101 deny icmp 11.1.1.1 0.0.0.0 host 172.16.1.1

R1 (config) # access-list 101permit ip any any

2. Apply the ACL list to the port

R1 (config) # interface fastEthernet 0Universe 0

R1 (config-if) # ip access-group 101in

3. Display the ACL list

R1#show access-list / / show R1 all access lists

Extended IP access list 101

10 deny tcp 11.1.1.0 0.0.0.255 192.168.1.0 0.0.0.255 eq telnet

20 deny icmp host 11.1.1.3 host 192.168.1.1

30 deny icmp host 11.1.1.1 host 172.16.1.1

40 permit ip any any (40 matches)

List of R1#show access-list 101s / / show R1 No. 101,

4. Edit the ACL list

R1 (config) # ip access-list extended 101

/ / Delete the list No. 10, 20 and 30

R1 (config-ext-nacl) # no 10

R1 (config-ext-nacl) # no 20

R1 (config-ext-nacl) # no 30

/ / add list

R1 (config-ext-nacl) # deny tcp 11.1.1.0 0.0.255 192.168.1.0 0.0.255 eq 23

R1 (config-ext-nacl) # deny icmp 11.1.1.3 0.0.0.0 host 192.168.1.1

R1 (config-ext-nacl) # deny icmp 11.1.1.1 0.0.0.0 host 172.16.1.1

R1#show access-list / / show R1 all access lists

Extended IP access list 101

10 deny tcp 11.1.1.0 0.0.0.255 192.168.1.0 0.0.0.255 eq telnet

20 deny icmp host 11.1.1.3 host 192.168.1.1

30 deny icmp host 11.1.1.1 host 172.16.1.1

40 permit ip any any (40 matches)

/ / insert list

R1 (config-ext-nacl) # 25 deny icmp host 11.1.1.2 host 192.168.1.1

R1#show ip access-lists

Extended IP access list 101

10 deny tcp 11.1.1.0 0.0.0.255 192.168.1.0 0.0.0.255 eq telnet

20 deny icmp host 11.1.1.3 host 192.168.1.1

25 deny icmp host 11.1.1.2 host 192.168.1.1 / / New Strategy for insertion

30 deny icmp host 11.1.1.1 host 172.16.1.1

40 permit ip any any (40 matches)

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.