Cisco5520 ACL配置

定义时间段
time-range freetime
 periodic weekend 8:00 to 22:00
 periodic weekdays 17:00 to 22:00
 
 定义允许通过的协议（服务）
 object-group protocol allprot
 protocol-object ip
 protocol-object udp
 protocol-object tcp
 protocol-object icmp
 protocol-object gre
 
 定义网段或主机
object-group network
object-group network 74-75
 network-object 172.19.74.0 255.255.254.0
object-group network 76-79
 network-object 172.19.76.0 255.255.252.0
object-group network hosts
 network-object host 172.19.74.122
object-group network DM_INLINE_NETWORK_1
 group-object 74-75
 group-object hosts

 
 
定义access-list

access-list outside_access_in extended permit object-group allprot any any
access-list inside_access_in extended permit object-group allprot object-group 76-79 any time-range freetime
access-list inside_access_in extended permit object-group allprot object-group DM_INLINE_NETWORK_1 any



将定义的acl作用到端口

access-group outside_access_in in interface outside
access-group inside_access_in in interface inside

本文出自 “lotus” 博客，谢绝转载！