Phn 3.

Access-list v cc cu hnh lin quan

Phn 3. Access-list v cc cu hnh lin quan. 1.Nhc li v l thuy t. !" # l$i access-list. <!--[if !supLists]-- - <!--[en!if]-- %$i th& nht' "tan!a#! $P Access-list ch% l&c !' li(u !)a v* +,a ch% $P n-u.n. /an-e c0a l*1i n2 l t3 4 55. 6n +78c p !9n- v:i c;n- -n +<ch nht. <!--[if !supLists]-!)a v* <!--[if !supLists]-<!--[if !supLists]-<!--[if !supLists]-<!--[if !supLists]-<!--[if !supLists]-/an-e c0a l*1i n2 - <!--[en!if]-- %$i th& hai' =>ten!e! $P Access-list l&c !' li(u * * * * * l <!--[en!if]-<!--[en!if]-<!--[en!if]-<!--[en!if]-<!--[en!if]-t3 4QQ 455. ?,a ch% $P n-u.n ?,a ch% $P +<ch @ia* thAc BCDPE FGPH "I c;n- BJCCPE CelnetKH L cc thMn- sI Nhc nh7 Oin!ca#! PasN 6n +78c p !9n- v:i c;n- -n n-u.n nht.

(ai )*+c ,- cu hnh Access-list <!--[if !supLists]-- - <!--[en!if]-- R7:c 4S C1* access-list t#*n- chT +U cu hnh c*nfi-. <!--[if !supLists]-- - <!--[en!if]-- R7:c VS Wp !9n- access-list ch* t3n- c;n- tuX the* 2u cu Y chT +U cu hnh Bc*nfi--ifH %*u ' Z[c +,nh c0a tt c\ Access-list l !en2 allE v v]2 t#*n- tt c\ cc access-list tIi thi^u ph\i c_ 4 l(nh pe#Pit. 6Tu t#*n- access-list c_ c\ pe#Pit v !en2 th nn +^ cc !`nl(nh pe#Pit an t#n. Lb h7:n- c0a access-list B$ncdutH Nhi p !9n- v* c;n- c_ th^ hi^u +en -i\n lS $n l t3 h*stE dut l t:i h*st ha2 $n v* t#*n- /*ute#E c`n dut l #a Nhfi /*ute#. ?Ii v:i $6 #*ute# Ni^P t#a -_i tin t#7:c Nhi n_ +78c +7a t:i a\n- >g lh. ?Ii vei dFCE #*ute# Ni^P t#a -_i tin sau Nhi n_ v* a\n- >g lh. Oin!ca#! PasN +78c t<nh ain- cMn- thAcS OZ j Vkk.Vkk.Vkk.Vkk l "uanet PasN BWp !9n- ch* c\ Dlassful v Dlassless a!!#eessH Q.Q.Q.Q Vkk.Vkk.Vkk.Vkk j an2. Ip address 0.0.0.0 = h*st ip address (ch nh tng host mt ) #.!u hnh .tan/a0/ Access-list 123 /45 /*ute#Bc*nfi-Hmaccess-list 4 !en2 4nV.4o.Q.Q Q.Q.Vkk.Vkk /*ute#Bc*nfi-Hmaccess-list 4 pe#Pit an2 /*ute#Bc*nfi-Hminte#face fastethe#net QcQ /*ute#Bc*nfi--inHmip access--#*up in

3.!u hnh 67ten/e/ Access-list 123 /45 /*ute#Bc*nfi-Hmaccess-list 4Q4 !en2 tcp 4nV.4o.Q.Q Q.Q.Vkk.Vkk h*st 45V.4op.4.4 eq telnet /*ute#Bc*nfi-Hmaccess-list 4Q4 !en2 tcp 4nV.4o.Q.Q Q.Q.Vkk.Vkk h*st 45V.4op.4.V eq ftp /*ute#Bc*nfi-Hmaccess-list 4Q4 pe#Pit an2 an2 /*ute#Bc*nfi-Hminte#face fastethe#net QcQ /*ute#Bc*nfi--intHmip access--#*up *ut 8.!u hnh na9e/ A!% thay ch$ cc s: hi;u. /*ute#Bc*nfi-Hmip access-list e>ten!e! se#ve#-access Btn ca access-list) /*ute#Bc*nfi--e>t-naclHmpe#Pit tcp an2 h*st 45V.4op.4.3 eq telnet /*ute#Bc*nfi-Hminte#face fastethe#net QcQ /*ute#Bc*nfi--intHmip access--#*up se#ve#-access *ut <.Pe09it h$=c >eny ?elnet s@ /4nA .tan/a0/ Acl 123 /45 /*ute#Bc*nfi-Hmaccess-list V pe#Pit 4nV.4o.Q.Q Q.Q.Vkk.Vkk /*ute#Bc*nfi-Hmaccess-list V !en2 an2 /*ute#Bc*nfi-Hmline vt2 Q q /*ute#Bc*nfi--lineHmpassr*#! cisc* /*ute#Bc*nfi--lineHml*-in /*ute#Bc*nfi--lineHmip access-class V in B.C$ v Di-9 t0a Access-list ZuIn >* th ta !sn- l(nh sauS /*ute#Bc*nfi-Hm n* ip access-list s hi ! ti^P t#a Acl ta !sn- cc l(nh sauS <!--[if !supLists]-- - <!--[en!if]-- sh*r access-list <!--[if !supLists]-- - <!--[en!if]-- sh*r #unnin--c*nfi<!--[if !supLists]-- - <!--[en!if]-- sh*r ip inte#face