设为首页 收藏本站
查看: 1476|回复: 0

[经验分享] Cisco 3560 48口交换机配置ACL

[复制链接]

尚未签到

发表于 2018-7-21 06:02:02 | 显示全部楼层 |阅读模式
大 家先看下配置, 我的要求就是,在47口上做镜像,4vlan内的机器的数据镜像到47口上,47口接监控服务器,然后在做下访问控制,4vlan内的机器  跟47口上的服务器可以相互通讯,但4vlan之间不能相互通讯!目前47口的ip地址为192.168.25.1  255.255.255.0.希望高手给我写下acl的配置信息!定表重谢!  FwhSwh#show run
  Building configuration...
  Current configuration : 4909 bytes
  !
  version 12.2
  no service pad
  service timestamps debug uptime
  service timestamps log uptime
  no service password-encryption
  !
  hostname FwhSwh
  !
  !
  no aaa new-model
  ip subnet-zero
  ip routing
  !
  ip dhcp pool vlan20
  network 192.168.20.0 255.255.255.0
  default-router 192.168.20.1
  dns-server 202.106.196.115 202.106.0.20
  !
  ip dhcp pool vlan21
  network 192.168.21.0 255.255.255.0
  default-router 192.168.21.1
  dns-server 202.106.196.115 202.106.0.20
  !
  ip dhcp pool vlan22
  network 192.168.22.0 255.255.255.0
  default-router 192.168.22.1
  dns-server 202.106.196.115 202.106.0.20
  !
  ip dhcp pool vlan23
  network 192.168.23.0 255.255.255.0
  default-router 192.168.23.1
  dns-server 202.106.0.20
  !
  !
  !
  !
  no file verify auto
  spanning-tree mode pvst
  spanning-tree extend system-id
  !
  vlan internal allocation policy ascending
  !
  interface FastEthernet0/1
  switchport access vlan 20
  !
  interface FastEthernet0/2
  switchport access vlan 20
  !
  interface FastEthernet0/3
  switchport access vlan 20
  !
  interface FastEthernet0/4
  switchport access vlan 20
  !
  interface FastEthernet0/5
  switchport access vlan 20
  !
  interface FastEthernet0/6
  switchport access vlan 20
  !
  interface FastEthernet0/7
  switchport access vlan 20
  !
  interface FastEthernet0/8
  switchport access vlan 20
  !
  interface FastEthernet0/9
  switchport access vlan 20
  !
  interface FastEthernet0/10
  switchport access vlan 20
  !
  interface FastEthernet0/11
  switchport access vlan 20
  !
  interface FastEthernet0/12
  switchport access vlan 20
  !
  interface FastEthernet0/13
  switchport access vlan 20
  !
  interface FastEthernet0/14
  switchport access vlan 20
  !
  interface FastEthernet0/15
  switchport access vlan 20
  !
  interface FastEthernet0/16
  switchport access vlan 20
  !
  interface FastEthernet0/17
  switchport access vlan 20
  !
  interface FastEthernet0/18
  switchport access vlan 20
  !
  interface FastEthernet0/19
  switchport access vlan 20
  !
  interface FastEthernet0/20
  switchport access vlan 20
  !
  interface FastEthernet0/21
  switchport access vlan 21
  !
  interface FastEthernet0/22
  switchport access vlan 21
  !
  interface FastEthernet0/23
  switchport access vlan 21
  !
  interface FastEthernet0/24
  switchport access vlan 21
  !
  interface FastEthernet0/25
  switchport access vlan 21
  !
  interface FastEthernet0/26
  switchport access vlan 21
  !
  interface FastEthernet0/27
  switchport access vlan 21
  !
  interface FastEthernet0/28
  switchport access vlan 21
  !
  interface FastEthernet0/29
  switchport access vlan 21
  !
  interface FastEthernet0/30
  switchport access vlan 21
  !
  interface FastEthernet0/31
  switchport access vlan 22
  !
  interface FastEthernet0/32
  switchport access vlan 22
  !
  interface FastEthernet0/33
  switchport access vlan 22
  !
  interface FastEthernet0/34
  switchport access vlan 22
  !
  interface FastEthernet0/35
  switchport access vlan 22
  !
  interface FastEthernet0/36
  switchport access vlan 22
  !
  interface FastEthernet0/37
  switchport access vlan 22
  !
  interface FastEthernet0/38
  switchport access vlan 22
  !
  interface FastEthernet0/39
  switchport access vlan 22
  !
  interface FastEthernet0/40
  switchport access vlan 22
  !
  interface FastEthernet0/41
  switchport access vlan 23
  !
  interface FastEthernet0/42
  switchport access vlan 23
  !
  interface FastEthernet0/43
  switchport access vlan 23
  !
  interface FastEthernet0/44
  switchport access vlan 23
  !
  interface FastEthernet0/45
  !
  interface FastEthernet0/46
  !
  interface FastEthernet0/47
  !
  interface FastEthernet0/48
  no switchport
  ip address *.*.*.* 255.255.255.0
  !
  interface GigabitEthernet0/1
  !
  interface GigabitEthernet0/2
  !
  interface GigabitEthernet0/3
  !
  interface GigabitEthernet0/4
  !
  interface Vlan1
  no ip address
  shutdown
  !
  interface Vlan20
  ip address 192.168.20.1 255.255.255.0
  ip access-group 100 in
  ip helper-address 192.168.20.1
  !
  interface Vlan21
  ip address 192.168.21.1 255.255.255.0
  ip access-group 101 in
  ip helper-address 192.168.21.1
  !
  interface Vlan22
  ip address 192.168.22.1 255.255.255.0
  ip access-group 102 in
  ip helper-address 192.168.22.1
  !
  interface Vlan23
  ip address 192.168.23.1 255.255.255.0
  ip access-group 103 in
  ip helper-address 192.168.23.1
  !

  ip>  ip route 0.0.0.0 0.0.0.0 10.0.0.1
  no ip http server
  !
  access-list 100 deny   ip any 192.168.21.0 0.0.0.255
  access-list 100 deny   ip any 192.168.22.0 0.0.0.255
  access-list 100 permit ip any any
  access-list 101 deny   ip any 192.168.22.0 0.0.0.255
  access-list 101 deny   ip any 192.168.20.0 0.0.0.255
  access-list 101 deny   ip any 192.168.23.0 0.0.0.255
  access-list 101 permit ip any any
  access-list 102 deny   ip any 192.168.20.0 0.0.0.255
  access-list 102 deny   ip any 192.168.21.0 0.0.0.255
  access-list 102 deny   ip any 192.168.23.0 0.0.0.255
  access-list 102 permit ip any any
  access-list 103 deny   ip any 192.168.21.0 0.0.0.255
  access-list 103 deny   ip any 192.168.22.0 0.0.0.255
  access-list 103 permit ip any any
  !
  control-plane
  !
  !
  line con 0
  line vty 0 4
  no login
  line vty 5 15
  no login
  !
  !
  end

运维网声明 1、欢迎大家加入本站运维交流群:群②:261659950 群⑤:202807635 群⑦870801961 群⑧679858003
2、本站所有主题由该帖子作者发表,该帖子作者与运维网享有帖子相关版权
3、所有作品的著作权均归原作者享有,请您和我们一样尊重他人的著作权等合法权益。如果您对作品感到满意,请购买正版
4、禁止制作、复制、发布和传播具有反动、淫秽、色情、暴力、凶杀等内容的信息,一经发现立即删除。若您因此触犯法律,一切后果自负,我们对此不承担任何责任
5、所有资源均系网友上传或者通过网络收集,我们仅提供一个展示、介绍、观摩学习的平台,我们不对其内容的准确性、可靠性、正当性、安全性、合法性等负责,亦不承担任何法律责任
6、所有作品仅供您个人学习、研究或欣赏,不得用于商业或者其他用途,否则,一切后果均由您自己承担,我们对此不承担任何法律责任
7、如涉及侵犯版权等问题,请您及时通知我们,我们将立即采取措施予以解决
8、联系人Email:admin@iyunv.com 网址:www.yunweiku.com

所有资源均系网友上传或者通过网络收集,我们仅提供一个展示、介绍、观摩学习的平台,我们不对其承担任何法律责任,如涉及侵犯版权等问题,请您及时通知我们,我们将立即处理,联系人Email:kefu@iyunv.com,QQ:1061981298 本贴地址:https://www.yunweiku.com/thread-539279-1-1.html 上篇帖子: Cisco路由器配置DHCP过程详细讲解 下篇帖子: 热备份路由协议(hsrp)cisco
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

扫码加入运维网微信交流群X

扫码加入运维网微信交流群

扫描二维码加入运维网微信交流群,最新一手资源尽在官方微信交流群!快快加入我们吧...

扫描微信二维码查看详情

客服E-mail:kefu@iyunv.com 客服QQ:1061981298


QQ群⑦:运维网交流群⑦ QQ群⑧:运维网交流群⑧ k8s群:运维网kubernetes交流群


提醒:禁止发布任何违反国家法律、法规的言论与图片等内容;本站内容均来自个人观点与网络等信息,非本站认同之观点.


本站大部分资源是网友从网上搜集分享而来,其版权均归原作者及其网站所有,我们尊重他人的合法权益,如有内容侵犯您的合法权益,请及时与我们联系进行核实删除!



合作伙伴: 青云cloud

快速回复 返回顶部 返回列表