76、交换机配置实验之VACL

1、交换机数据转发流程解析

wKioL1Z8ruDhkXwuAAGO3wVRiNM831.png

wKiom1Z8rs6gvi39AANHjErJU84150.png

wKioL1Z8rueSit74AAIvZpUVVM0083.png


2、实验拓扑

wKioL1Z8r5DT1QnyAAAv61iVtTo465.png

3、配置基于IP的VACL

wKioL1Z8sCnzzIY0AAAnD0OlfiU121.png3560配置

access-list 1 permit 192.168.120.210

vlan access-map VACL 10

 action drop

 match ip address 1

vlan filter VACL vlan-list 1

wKioL1Z8sgbhzAKCAAAdsWUIyy0955.png


4、配置基于MAC的VACL

wKioL1Z8sCnzzIY0AAAnD0OlfiU121.png

3560配置

mac access-list extended VACL_MAC

 permit host 94de.801d.3277 any

vlan access-map VACL 10

 action drop

 match mac address VACL_MAC

vlan filter VACL vlan-list 1

wKioL1Z8sgbhzAKCAAAdsWUIyy0955.png

测试之前用arp -d清楚之前的ARP缓冲,要不将会看到依旧ping得通。


你可能感兴趣的:(76,交换机配置实验值VACL)