Difference between revisions of "CCNA Explorer 4 ACLs"

From Teknologisk videncenter
Jump to: navigation, search
m (→‎Wildcard MASKS)
m (→‎ACL best practice)
 
(11 intermediate revisions by one other user not shown)
Line 1: Line 1:
 
*Se [[Access-list Cisco IOS]]
 
*Se [[Access-list Cisco IOS]]
−
{{TOCright}}
+
__TOC__
 
{|
 
{|
 
|-
 
|-
Line 34: Line 34:
 
|[[Image:Exp5sec11.png|800px|left|thumb|]]
 
|[[Image:Exp5sec11.png|800px|left|thumb|]]
 
|-
 
|-
−
|[[Image:Exp5sec12.png|800px|left|thumb|]]
+
|
−
|[[Image:Exp5sec13.png|800px|left|thumb|]]
+
{|
 +
|[[Image:Exp5sec12.png|400px|left|thumb|]]
 +
|[[Image:Exp5sec13.png|400px|left|thumb|]]
 +
|}
 
|-
 
|-
 
|
 
|
Line 43: Line 46:
 
|-
 
|-
 
|
 
|
−
=== Hvordan standard ACL fungerer
+
=== Hvordan standard ACL fungerer ===
 
|-
 
|-
−
|[[Image:Exp5sec15.png|800px|left|thumb|]]
+
|
−
|[[Image:Exp5sec16.png|800px|left|thumb|]]
+
{|
 +
|[[Image:Exp5sec15.png|400px|left|thumb|]]
 +
|[[Image:Exp5sec16.png|400px|left|thumb|]]
 +
|}
 
|-
 
|-
 
|
 
|
Line 67: Line 73:
 
== ACL best practice ==
 
== ACL best practice ==
 
|-
 
|-
−
|[[Image:Exp5sec20.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|[[Image:Exp5sec20.png|800px|left|thumb|]]
 
|-
 
|-
−
|[[Image:Exp5sec21.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|[[Image:Exp5sec21.png|800px|left|thumb|Disse 2 ACL'er har samme effekt]]
 
|-
 
|-
 
|
 
|
 +
 
== Configuring standard ACL ==
 
== Configuring standard ACL ==
 
|-
 
|-
−
|[[Image:Exp5sec22.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|[[Image:Exp5sec22.png|800px|left|thumb|]]
 
|-
 
|-
−
|[[Image:Exp5sec23.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|[[Image:Exp5sec23.png|800px|left|thumb|]]
 
|-
 
|-
−
|[[Image:Exp5sec24.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|[[Image:Exp5sec24.png|800px|left|thumb|]]
 
|-
 
|-
−
|[[Image:Exp5sec25.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|[[Image:Exp5sec25.png|800px|left|thumb|]]
 
|-
 
|-
−
|[[Image:Exp5sec26.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|[[Image:Exp5sec26.png|800px|left|thumb|t]]
 
|-
 
|-
 
|
 
|
 
== Wildcard MASKS ==
 
== Wildcard MASKS ==
 
|-
 
|-
−
|[[Image:Exp5sec27.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|[[Image:Exp5sec27.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec28.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec29.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec30.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec31.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec32.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec33.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec34.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec35.png|800px|left|thumb|t]]
 +
|-
 +
|
 +
== Procedure for at konfigurere standard ACL ==
 +
|-
 +
|[[Image:Exp5sec36.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec37.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec38.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec39.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec40.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec39.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec40.png|800px|left|thumb|]]
 +
|-
 +
|
 +
== Procedure for at konfigurere navngivne ACL ==
 +
|-
 +
|[[Image:Exp5sec41.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec42.png|800px|left|thumb|]]
 +
|-
 +
|
 +
== Navngivne access lister ==
 +
|-
 +
|[[Image:Exp5sec43.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec44.png|800px|left|thumb|]]
 +
|-
 +
|
 +
== Se access lister ==
 +
|-
 +
|[[Image:Exp5sec45.png|800px|left|thumb|]]
 +
|-
 +
|
 +
== tilføj en linie i en access list ==
 +
|-
 +
|[[Image:Exp5sec46.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec47.png|800px|left|thumb|]]
 
|-
 
|-
−
|[[Image:Exp5sec28.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|
 +
== Extended access lists ==
 +
=== Testing packets ===
 
|-
 
|-
−
|[[Image:Exp5sec29.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|
 +
{|
 +
|[[Image:Exp5sec48.png|400px|left|thumb|]]
 +
|[[Image:Exp5sec49.png|400px|left|thumb|]]
 +
|}
 +
|-
 +
|
 +
=== Eksempler ===
 +
|-
 +
|[[Image:Exp5sec50.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec51.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec52.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec53.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec54.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec55.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec56.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec57.png|800px|left|thumb|]]
 +
|-
 +
|
 +
=== Navngivne extendede ACL's ===
 +
|-
 +
|[[Image:Exp5sec58.png|800px|left|thumb|]]
 +
|-
 +
|
 +
== Komplekse ACL'er==
 +
|-
 +
|[[Image:Exp5sec59.png|800px|left|thumb|]]
 +
|-
 +
|
 +
=== Dynamiske ACL's ===
 +
|-
 +
|[[Image:Exp5sec60.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec61.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec62.png|800px|left|thumb|]]
 +
|-
 +
|
 +
=== Refleksive ACL's ===
 +
|-
 +
|[[Image:Exp5sec63.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec64.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec65.png|800px|left|thumb|]]
 +
|-
 +
|
 +
=== Time based ACL's ===
 +
|-
 +
|[[Image:Exp5sec66.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec67.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec68.png|800px|left|thumb|]]
 +
|-
 +
|
 +
== fejlfinding på ACL's ==
 +
|-
 +
|[[Image:Exp5sec69.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec70.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec71.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec72.png|800px|left|thumb|]]
 +
|-
 +
|[[Image:Exp5sec73.png|800px|left|thumb|]]
 +
|-
 +
|
 +
== Summary ==
 
|-
 
|-
−
|[[Image:Exp5sec30.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
 
 
|-
 
|-
−
|[[Image:Exp5sec31.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
+
|[[Image:Exp5sec74.png|800px|left|thumb|]]
−
|[[Image:Exp5sec32.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
 
−
|[[Image:Exp5sec33.png|800px|left|thumb|Placer Extended ACL så tæt på '''afsenderen''' som muligt]]
 
 
|-
 
|-
 
|}
 
|}
 
[[Category:CCNA]]
 
[[Category:CCNA]]

Latest revision as of 06:46, 15 April 2011

Exp5sec1.png

TCP forbindelse

Exp5sec2.png

Port numre

Exp5sec3.png
Exp5sec4.png
Exp5sec5.png

ACL's princip

Exp5sec6.png
Exp5sec7.png
Exp5sec8.png
Exp5sec9.png
Inbound ACL's
Exp5sec11.png
Exp5sec12.png
Exp5sec13.png

Typer af ACL lists

Exp5sec14.png

Hvordan standard ACL fungerer

Exp5sec15.png
Exp5sec16.png

Nummerering og navngivning af ACL's

Exp5sec17.png

Placering af ACL'er

Standard ACL

Placer Standard ACL så tæt på modtageren som muligt

Extended ACL

Placer Extended ACL så tæt på afsenderen som muligt

ACL best practice

Exp5sec20.png
Disse 2 ACL'er har samme effekt

Configuring standard ACL

Exp5sec22.png
Exp5sec23.png
Exp5sec24.png
Exp5sec25.png
t

Wildcard MASKS

Exp5sec27.png
Exp5sec28.png
Exp5sec29.png
Exp5sec30.png
Exp5sec31.png
Exp5sec32.png
Exp5sec33.png
Exp5sec34.png
t

Procedure for at konfigurere standard ACL

Exp5sec36.png
Exp5sec37.png
Exp5sec38.png
Exp5sec39.png
Exp5sec40.png
Exp5sec39.png
Exp5sec40.png

Procedure for at konfigurere navngivne ACL

Exp5sec41.png
Exp5sec42.png

Navngivne access lister

Exp5sec43.png
Exp5sec44.png

Se access lister

Exp5sec45.png

tilføj en linie i en access list

Exp5sec46.png
Exp5sec47.png

Extended access lists

Testing packets

Exp5sec48.png
Exp5sec49.png

Eksempler

Exp5sec50.png
Exp5sec51.png
Exp5sec52.png
Exp5sec53.png
Exp5sec54.png
Exp5sec55.png
Exp5sec56.png
Exp5sec57.png

Navngivne extendede ACL's

Exp5sec58.png

Komplekse ACL'er

Exp5sec59.png

Dynamiske ACL's

Exp5sec60.png
Exp5sec61.png
Exp5sec62.png

Refleksive ACL's

Exp5sec63.png
Exp5sec64.png
Exp5sec65.png

Time based ACL's

Exp5sec66.png
Exp5sec67.png
Exp5sec68.png

fejlfinding på ACL's

Exp5sec69.png
Exp5sec70.png
Exp5sec71.png
Exp5sec72.png
Exp5sec73.png

Summary

Exp5sec74.png
Retrieved from "http://mars.merhot.dk/w/index.php?title=CCNA_Explorer_4_ACLs&oldid=17601"