訪問控制列表

IntroducingACLOperationAccessControlListsOutlineOverviewACLOverviewACLApplicationsTypesofACLsACLOperationsACLStatementProcessingWildcardMaskingProcessSummaryWhyUseACLs?Filtering過濾:ManageIPtrafficbyfilteringpacketspassingthrougharouterClassification分類:IdentifytrafficforspecialhandlingACLApplications:FilteringPermitordenypacketsmovingthroughtherouter.Permitordenyvtyaccesstoorfromtherouter.WithoutACLs,allpacketscouldbetransmittedtoallpartsofyournetwork.ACLApplications:Classification定義被保護(hù)的流量定義被過濾的路由選擇更新定義需要轉(zhuǎn)換的地址SpecialhandlingfortrafficbasedonpackettestsTypesofACLs

StandardACL標(biāo)準(zhǔn)列表:(1-99)檢查數(shù)據(jù)包的源地址一旦應(yīng)用會(huì)對所有的協(xié)議調(diào)用

ExtendedACL擴(kuò)展列表:(100-199)檢查數(shù)據(jù)包的源地址和目的地址對特定的某些協(xié)議某些端口進(jìn)行調(diào)用

NamedACL:

standardandextendedACLs:NumberedACLsuseanumberforidentificationNamedACLsuseadescriptivenameornumberforidentificationHowtoIdentifyACLsNumberedstandardIPv4lists(1–99)testconditionsofallIP

packetsforsourceaddresses.Expandedrange(1300–1999).NumberedextendedIPv4lists(100–199)testconditionsofsource

anddestinationaddresses,specificTCP/IPprotocols,anddestination

ports.Expandedrange(2000–2699).NamedACLsidentifyIPstandardandextendedACLswithan

alphanumericstring(name).

標(biāo)準(zhǔn)ACL的工作原理出站訪問列表的工作原理WildcardBits:HowtoChecktheCorrespondingAddressBits0meanstomatchthevalueofthecorrespondingaddressbit1meanstoignorethevalueofthecorrespondingaddressbitWildcardBitstoMatchaSpecificIPHostAddressWildcardBitstoMatchAnyIPAddressMatchforIPsubnets172.30.16.0/24to172.30.31.0/