Cisco IOS và ACL

Cisco IOS• User mode: Router> • Privileged mode: enable Router# • Configuration mode: configure terminal Routerconfig# Routerconfig-if#... Cisco IOS• Đặt Hostname cho Router: Routerconfi

Trang 1

Đề tài 16: Cisco IOS và ACL

Bùi Hồng Nhung :20111947 Lều Thị Lan :20111775 Nomintsetseg.J :20114660

Trang 2

Cisco IOS

• User mode:

Router>

• Privileged mode: enable

Router#

• Configuration mode: configure terminal

Router(config)#

Router(config-if)#

Trang 3

Cisco IOS

• Đặt Hostname cho Router:

Router(config)#hostname Worker

Worker(config)#

• Banner cho Router:

Worker(config)#banner motd "Xin chao cac ban!!!" Worker(config)#end

Trang 4

Cisco IOS

• Đặt mật khẩu cho Router

Worker(config)#enable secret ccna (md5)

Worker(config)#enable password ccna (md7)

• Đặt mật khẩu cho Telnet, Console và AUX

Worker(config)#line vty 0 4|console 0|aux 0 Worker(config-line)#password cisco

Worker(config-line)#login

Trang 5

Topo mạng

Trang 6

Mạng Marketing (IPv4)

Trang 7

Cấu hình Standard ACL

• Mạng Marketing

Marketing (config)#access-list 99 permit host 10.2.2.10 Marketing (config)#line vty 0 15

Marketing (config-if)#access-class 99 in

Marketing (config)#int g0/1

Marketing (config-if)#ip access-group 99 in

Trang 8

Cấu hình Numbered-Extended ACL

• Mạng Marketing

Marketing(config)#ip access-list extended 101

Marketing(config-ext-nacl)# permit icmp host 10.2.3.11 10.2.1.0 0.0.0.255 echo Marketing(config-ext-nacl)# permit tcp host 10.2.3.12 10.2.1.0 0.0.0.255 eq www Marketing(config)#int g0/2

Marketing(config-if)#ip access-group 101 in

Trang 9

Cấu hình Named-Extended ACL

Mạng Marketing

Marketing(config)#ip access-list extended Marketing

Marketing(config-ext-nacl)#permit tcp 10.2.1.0 0.0.0.255 host 10.3.0.10 eq www Marketing(config-ext-nacl)#permit tcp 10.2.1.0 0.0.0.255 host 10.3.0.20 eq www

Marketing(config-ext-nacl)#permit tcp 10.2.1.0 0.0.0.255 host 10.3.0.30 eq ftp

Marketing(config-ext-nacl)#deny tcp any any

Marketing(config-ext-nacl)#exit

Marketing(config)#int s0/3/0

Marketing(config-if)#ip access-group Marketing out

Trang 10

Mạng Engineer (IPv6)

Trang 11

Cấu hình ACL IPv6

• Mạng Engineer

Worker(config)#ipv6 access-list WORKER

Worker(config-ipv6-acl)#permit tcp host 2001:db8:1::10 host 2001:db8:4::40 eq

www

Worker(config-ipv6-acl)#exit

Worker(config)#int g0/0

Worker(config-if)#ipv6 traffic-filter WORKER in

Trang 12

Cấu hình ACL IPv6

Mạng Engineer

Engineer(config)#ipv6 access-list SERVER

Engineer (config-ipv6-acl)#permit ipv6 2001:db8:4::/64 2001:db8:5::/64 Engineer (config-ipv6-acl)#exit

Engineer (config)#int g0/0

Engineer (config-if)#ipv6 traffic-filter SERVER out

Engineer (config-if)#exit

Trang 13

Cấu hình Named-Extended ACL

Mạng Engineer

Engineer(config)#ip access-list extended DualStack

Engineer (config-ext-nacl)#permit tcp 10.1.1.0 0.0.0.255 host 10.3.0.10 eq www Engineer (config-ext-nacl)#permit tcp 10.1.1.0 0.0.0.255 host 10.3.0.20 eq www Engineer (config-ext-nacl)#permit tcp 10.1.1.0 0.0.0.255 host 10.3.0.30 eq ftp Engineer (config-ext-nacl)#exit

Engineer (config)#int s0/3/0

Engineer (config-if)#ip access-group DualStack out

Định dạng
Số trang	13
Dung lượng	197,27 KB