CCNA新版PPT 第12章 IP访问控制列表.ppt

* * Slide 3 of 3 Purpose: Emphasize: Slide 3 of 3 Purpose: Emphasize: Emphasize: Explain the basic rules on where to configure standard and extended access lists. Describe how the extended access list can eliminate unwanted traffic across the serial lines. * * * Purpose: This slide shows how to verify an access list. Emphasize: Lists IP interface information. Indicates whether outgoing access list is set. Review the output of the show ip interface command. The highlighted text shows details about access list settings in the show command output. access-list 120 deny icmp any any echo access-list 120 deny icmp any any echo-reply access-list 120 deny tcp any any eq 135 access-list 120 deny udp any any eq 135 access-list 120 deny tcp any any eq 139 access-list 120 deny udp any any eq 139 access-list 120 deny tcp any any eq 445 access-list 120 deny udp any any eq 445 access-list 120 deny tcp any any eq 593 access-list 120 deny udp any any eq 593 access-list 120 permit ip any any access-list 115 deny icmp any any echo access-list 115 deny icmp any any echo-reply access-list 115 deny tcp any any eq 135 access-list 115 deny udp any any eq 135 access-list 115 deny udp any any eq 69 access-list 115 deny udp any any eq 137 access-list 115 deny udp any any eq 138 access-list 115 deny tcp any any eq 139 access-list 115 deny udp any any eq 139 access-list 115 deny tcp any any eq 445 access-list 115 deny tcp any any eq 593 access-list 115 permit ip any any interface ip access-group 115 in ip access-group 115 out 如果你是在 pix 上封就是： access-list 115 deny icmp any any echo access-list 115 deny icmp any any echo-reply access-list 115 deny tcp any any eq 135 access-list 115 deny udp any any eq 135 access-list 115 deny udp any any eq 69 access-list 115 deny udp any any eq 137 access-list 115 deny udp any any eq 138 access-list 115 deny tcp any any eq 139 access-list 115 deny udp any any eq 139 access-list 115 deny