Scribd Logo
Încărcați

Bine ați venit la Scribd!

  • IOS IPv4 Access Lists

    Încărcat de

    Saba Wasim
    140 vizualizări1 pagină
    Ip access-list standard [ ] permit deny [log] packetlife.net Actions permit deny remark evaluate Allow matched packets. Deny packets matched by wildcard mask matched by any address host a single address any address matched by the wildcard mask IP Options ack Match ACK flag fin Match FIN flag psh Match RST Match RST flag syn Match SYN flag urg Match URG flag established

    Descriere originală:

    Drepturi de autor

    © Attribution Non-Commercial (BY-NC)

    Formate disponibile

    PDF, TXT sau citiți online pe Scribd

    Vi se pare util acest document?

    Este necorespunzător acest conținut?

    Raportați acest document
    Ip access-list standard [ ] permit deny [log] packetlife.net Actions permit deny remark evaluate Allow matched packets. Deny packets matched by wildcard mask matched by any address host a single address any address matched by the wildcard mask IP Options ack Match ACK flag fin Match FIN flag psh Match RST Match RST flag syn Match SYN flag urg Match URG flag established

    Drepturi de autor:

    Attribution Non-Commercial (BY-NC)
    Descărcați ca PDF, TXT sau citiți online pe Scribd
    Indicator pentru conținut neadecvat
    140 vizualizări1 pagină

    IOS IPv4 Access Lists

    Încărcat de

    Saba Wasim
    Ip access-list standard [ ] permit deny [log] packetlife.net Actions permit deny remark evaluate Allow matched packets. Deny packets matched by wildcard mask matched by any address host a single address any address matched by the wildcard mask IP Options ack Match ACK flag fin Match FIN flag psh Match RST Match RST flag syn Match SYN flag urg Match URG flag established

    Drepturi de autor:

    Attribution Non-Commercial (BY-NC)
    Descărcați ca PDF, TXT sau citiți online pe Scribd
    Indicator pentru conținut neadecvat
    din 1

    IOS IPV4 ACCESS LISTS packetlife.

    net
    Standard ACL Syntax Actions

    ! Legacy syntax permit Allow matched packets


    access-list <number> {permit | deny} <source> [log] deny Deny matched packets
    ! Modern syntax remark Record a configuration comment
    ip access-list standard {<number> | <name>}
    [<sequence>] {permit | deny} <source> [log] evaluate Evaluate a reflexive ACL

    Extended ACL Syntax

    ! Legacy syntax
    access-list <number> {permit | deny} <protocol> <source> [<ports>] <destination> [<ports>] [<options>]

    ! Modern syntax
    ip access-list extended {<number> | <name>}
    [<sequence>] {permit | deny} <protocol> <source> [<ports>] <destination> [<ports>] [<options>]

    ACL Numbers Source/Destination Definitions


    1-99 any Any address
    IP standard
    1300-1999
    host <address> A single address
    100-199
    IP extended <network> <mask> Any address matched by the wildcard mask
    2000-2699
    200-299 Protocol IP Options
    300-399 DECnet dscp <DSCP> Match the specified IP DSCP
    400-499 XNS fragments Check non-initial fragments
    500-599 Extended XNS option <option> Match the specified IP option
    600-699 Appletalk precedence {0-7} Match the specified IP precedence
    700-799 Ethernet MAC ttl <count> Match the specified IP time to live (TTL)
    800-899 IPX standard
    TCP/UDP Port Definitions
    900-999 IPX extended
    eq <port> Equal to neq <port> Not equal to
    1000-1099 IPX SAP
    lt <port> Less than gt <port> Greater than
    1100-1199 MAC extended
    range <port> <port> Matches a range of port numbers
    1200-1299 IPX summary
    Miscellaneous Options
    TCP Options
    reflect <name> Create a reflexive ACL entry
    ack Match ACK flag
    time-range <name> Enable rule only during the given time range
    fin Match FIN flag
    psh Match PSH flag Applying ACLs to Restrict Traffic

    rst Match RST flag interface FastEthernet0/0


    ip access-group {<number> | <name>} {in | out}
    syn Match SYN flag
    urg Match URG flag Troubleshooting
    Match packets in an show access-lists [<number> | <name>]
    established
    established session
    show ip access-lists [<number> | <name>]
    Logging Options show ip access-lists interface <interface>
    log Log ACL entry matches show ip access-lists dynamic
    Log matches including
    show ip interface [<interface>]
    log-input ingress interface and
    source MAC address show time-range [<name>]

    by Jeremy Stretch v2.0

    S-ar putea să vă placă și