訪問控制列表

IntroducingACLOperationAccessControlListsOutlineOverviewACLOverviewACLApplicationsTypesofACLsACLOperationsACLStatementProcessingWildcardMaskingProcessSummaryWhyUseACLs?Filtering過濾:ManageIPtrafficbyfilteringpacketspassingthrougharouterClassification分類:IdentifytrafficforspecialhandlingACLApplications:FilteringPermitordenypacketsmovingthroughtherouter.Permitordenyvtyaccesstoorfromtherouter.WithoutACLs,allpacketscouldbetransmittedtoallpartsofyournetwork.ACLApplications:Classification定義被保護的流量定義被過濾的路由選擇更新定義需要轉換的地址SpecialhandlingfortrafficbasedonpackettestsTypesofACLs

StandardACL標準列表:(1-99)檢查數(shù)據(jù)包的源地址一旦應用會對所有的協(xié)議調用

ExtendedACL擴展列表:(100-199)檢查數(shù)據(jù)包的源地址和目的地址對特定的某些協(xié)議某些端口進行調用

NamedACL:

standardandextendedACLs:NumberedACLsuseanumberforidentificationNamedACLsuseadescriptivenameornumberforidentificationHowtoIdentifyACLsNumberedstandardIPv4lists(1–99)testconditionsofallIP

packetsforsourceaddresses.Expandedrange(1300–1999).NumberedextendedIPv4lists(100–199)testconditionsofsource

anddestinationaddresses,specificTCP/IPprotocols,anddestination

ports.Expandedrange(2000–2699).NamedACLsidentifyIPstandardandextendedACLswithan

alphanumericstring(name).

標準ACL的工作原理出站訪問列表的工作原理WildcardBits:HowtoChecktheCorrespondingAddressBits0meanstomatchthevalueofthecorrespondingaddressbit1meanstoignorethevalueofthecorrespondingaddressbitWildcardBitstoMatchaSpecificIPHostAddressWildcardBitstoMatchAnyIPAddressMatchforIPsubnets172.30.16.0/24to172.30.31.0/