路由交换笔记（25）--ACL访问控制列表

enable
configure terminal
no ip domain-lookup
line console 0
logging synchronous
exec-timeout 0 0
hostname r1
inter lo0
ip add 1.1.1.1 255.255.255.0
no sh
int s0/0
ip add 192.1.1.1 255.255.255.0
no sh

 

int lo0
ip add 2.2.2.2 255.255.255.0
ena
conf t
no ip do loo
line con 0
logg sy
exec-tim 0 0
host r2
no sh
int s0/0
ip add 192.1.1.2 255.255.255.0
no sh
int s0/1
ip ad 193.1.1.1 255.255.255.0
no sh
end

ena
conf t
no ip do loo
line con 0
logg sy
exec-tim 0 0
host r3
int s0/1
ip add 193.1.1.2 255.255.255.0
no sh
int s0/2
ip add 194.1.1.1 255.255.255.0
no sh

ena
conf t
no ip do loo
line con 0
logg sy
exec-tim 0 0
host r4
int lo0
ip add 4.4.4.4 255.255.255.0
no sh
int s0/2
ip add 194.1.1.2 255.255.255.0
no sh
int s0/3
ip add 195.1.1.1 255.255.255.0
no sh
exit

ena
conf t
no ip do loo
line con 0
logg sy
exec-tim 0 0
host r
host r5
int lo0
ip add 5.5.5.5 255.255.255.0
no sh
int s0/3
ip add 195.1.1.2 255.255.255.0
no sh
end

 

1建立感兴趣的数据流；
   access-list 1 permit 192.168.1.10 0.0.0.0
   或：ip access-list standard huayu
       1 deny 192.168.1.0
       2 deny 192.168.2.0

   access-list 2 permit 192.168.1.100 0.0.0.0
      access-list 100 permit tcp 192.168.1.10 0.0.0.0                202.101.224.1 0.0.0.0 eq 80

 ip access-list extended

2建立路由图
  route-map name permit 10
    match ip address 1  100
    set ip next-hop <下一跳IP>
  route-map name permit 20
   match ip address 2
   set ip next-hop <下一跳IP>
3将路由图应用到接口
   int  fa0/0<入口>
     ip policy route-map name
   no shut
 或 <config>#ip local policy route-map name

补充：应该把路由器快速转发关闭。
     no ip cef
测试：traceroute IP  目标  源  查看路由器将数据分流。

 

CISCO 系列产品介绍和入门 （ZT）

http://www.cisco.com/warp/public/765/tools/quickreference/
介绍常用产品性能等参数的cheat sheet，投标宝典

http://www.cisco.com/global/au/cpp/refguide/hview/router/3700.shtml
常用路由器模块图片及简单介绍

http://www.cisco.com/global/au/cpp/refguide/hview/security/pix.shtml
PIX防火墙图片及简单介绍

http://www.cisco.com/en/US/products/prod_visio_icon_list.html
CISCO产品 viso 图标，画拓扑时候用

http://www.cisco.com/en/US/products/prod_end_of_life.html
CISCO停产和停止订购的产品公告

http://www.cisco.com/univercd/cc/td/doc/pcat/#ch8
CISCO Cable Guide，各种CISCO电缆的介绍

http://www.cisco.com/global/au/cpp/refguide/hview/wireless/1200.shtml
CISCO 1200系列无线AP介绍

http://www.cisco.com/global/au/cpp/refguide/hview/wireless/1100.shtml
CISCO 1100系列无线AP介绍

http://www.cisco.com/global/au/cpp/refguide/hview/wireless/1400.shtml
CISCO 1400系列无线网桥介绍

http://www.cisco.com/global/au/cpp/refguide/hview/wireless/client.shtml
CISCO 250系列无线网卡介绍

http://www.cisco.com/global/au/cpp/refguide/hview/wireless/antenna.shtml
CISCO Aironet无线产品的各种天线

http://www.cisco.com/global/au/cpp/refguide/hview/networkmanagement/nm_product_matrix.shtml
介绍CISCO网管软件的各种组件

本文出自 “更快、更高、更强” 博客，谢绝转载！