{"id":794,"date":"2025-11-28T09:34:15","date_gmt":"2025-11-28T01:34:15","guid":{"rendered":"https:\/\/www.htmacg.cn\/?p=794"},"modified":"2025-11-28T09:34:15","modified_gmt":"2025-11-28T01:34:15","slug":"%e5%8d%8e%e4%b8%ba%e6%a8%a1%e6%8b%9f%e5%99%a8-acl-%e8%ae%bf%e9%97%ae%e6%8e%a7%e5%88%b6%e9%85%8d%e7%bd%ae%e8%b6%85%e8%af%a6%e7%bb%86%e6%95%99%e7%a8%8b%ef%bc%88%e9%99%84%e6%8b%93%e6%89%91-%e5%91%bd","status":"publish","type":"post","link":"https:\/\/htmacg.cn\/?p=794","title":{"rendered":"\u534e\u4e3a\u6a21\u62df\u5668 ACL \u8bbf\u95ee\u63a7\u5236\u914d\u7f6e\u8d85\u8be6\u7ec6\u6559\u7a0b\uff08\u9644\u62d3\u6251 + \u547d\u4ee4 + \u9a8c\u8bc1\uff09"},"content":{"rendered":"

\u4e00\u3001\u5b9e\u9a8c\u73af\u5883<\/b><\/strong><\/h2>\n
    \n
  • \u786c\u4ef6\u8bbe\u5907\uff1a1 \u53f0\u8def\u7531\u5668\uff08AR1\uff09\u30011 \u53f0\u4ea4\u6362\u673a\uff08SW1\uff09\u30011 \u53f0\u8d22\u52a1\u7cfb\u7edf\u670d\u52a1\u5668\u30013 \u53f0 PC\uff08\u5206\u522b\u5c5e\u4e8e\u5f00\u53d1\u90e8\u3001\u5e02\u573a\u90e8\u3001\u8d22\u52a1\u90e8\uff09<\/li>\n
  • \u8f6f\u4ef6\u73af\u5883\uff1a\u534e\u4e3a eNSP \u6a21\u62df\u5668<\/li>\n
  • \u6838\u5fc3\u76ee\u6807\uff1a\u901a\u8fc7 ACL\uff08\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff09\u5b9e\u73b0\u90e8\u95e8\u95f4\u8bbf\u95ee\u6743\u9650\u7ba1\u63a7\uff0c\u4fdd\u969c\u8d22\u52a1\u7cfb\u7edf\u670d\u52a1\u5668\u5b89\u5168<\/li>\n<\/ul>\n

    \u4e8c\u3001\u5b9e\u9a8c\u9700\u6c42<\/b><\/strong><\/p>\n

      \n
    1. \u8d22\u52a1\u90e8\uff08PC3\uff09\u53ef\u6b63\u5e38\u8bbf\u95ee\u8d22\u52a1\u7cfb\u7edf\u670d\u52a1\u5668\uff1b<\/li>\n
    2. \u5f00\u53d1\u90e8\uff08PC1\uff09\u3001\u5e02\u573a\u90e8\uff08PC2\uff09\u7981\u6b62\u8bbf\u95ee\u8d22\u52a1\u7cfb\u7edf\u670d\u52a1\u5668\uff1b<\/li>\n
    3. \u6240\u6709\u90e8\u95e8\u53ef\u901a\u8fc7\u8def\u7531\u5668\u8bbf\u95ee\u5916\u90e8\u7f51\u7edc\uff08\u901a\u8fc7\u9ed8\u8ba4\u8def\u7531\u5b9e\u73b0\uff09\uff1b<\/li>\n
    4. \u5404\u90e8\u95e8\u7f51\u6bb5\u4e0e\u670d\u52a1\u5668\u7f51\u6bb5\u9694\u79bb\uff0c\u4ec5\u901a\u8fc7\u914d\u7f6e\u7684 ACL \u89c4\u5219\u653e\u884c \/ \u62d2\u7edd\u6307\u5b9a\u6d41\u91cf\u3002<\/li>\n<\/ol>\n

      \u4e09\u3001\u62d3\u6251\u7ed3\u6784\u8bf4\u660e<\/b><\/strong><\/p>\n

      \"\u56fe\u72471_compressed.png\"<\/p>\n

      \u56db\u3001IP & \u7aef\u53e3\u89c4\u5212\u8868<\/b><\/strong><\/p>\n

      1.IP \u5730\u5740\u89c4\u5212\uff08\u542b\u7f51\u5173\uff09<\/b><\/strong><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
      \u8bbe\u5907 \/ \u90e8\u95e8<\/b><\/strong><\/td>\nIP \u5730\u5740<\/b><\/strong><\/td>\n\u5b50\u7f51\u63a9\u7801<\/b><\/strong><\/td>\n\u7f51\u5173\u5730\u5740<\/b><\/strong><\/td>\n\u6240\u5c5e VLAN<\/b><\/strong><\/td>\n<\/tr>\n
      \u8d22\u52a1\u7cfb\u7edf\u670d\u52a1\u5668<\/td>\n192.168.40.1<\/td>\n255.255.255.0<\/td>\n192.168.40.254<\/td>\nVLAN40<\/td>\n<\/tr>\n
      \u5f00\u53d1\u90e8 PC1<\/td>\n192.168.10.1<\/td>\n255.255.255.0<\/td>\n192.168.10.254<\/td>\nVLAN10<\/td>\n<\/tr>\n
      \u5e02\u573a\u90e8 PC2<\/td>\n192.168.20.1<\/td>\n255.255.255.0<\/td>\n192.168.20.254<\/td>\nVLAN20<\/td>\n<\/tr>\n
      \u8d22\u52a1\u90e8 PC3<\/td>\n192.168.30.1<\/td>\n255.255.255.0<\/td>\n192.168.30.254<\/td>\nVLAN30<\/td>\n<\/tr>\n
      \u8def\u7531\u5668 AR1\uff08G0\/0\/0\uff09<\/td>\n192.168.1.1<\/td>\n255.255.255.0<\/td>\n–<\/td>\n–<\/td>\n<\/tr>\n
      \u4ea4\u6362\u673a SW1\uff08VLAN10\uff09<\/td>\n192.168.10.254<\/td>\n255.255.255.0<\/td>\n–<\/td>\nVLAN10<\/td>\n<\/tr>\n
      \u4ea4\u6362\u673a SW1\uff08VLAN20\uff09<\/td>\n192.168.20.254<\/td>\n255.255.255.0<\/td>\n–<\/td>\nVLAN20<\/td>\n<\/tr>\n
      \u4ea4\u6362\u673a SW1\uff08VLAN30\uff09<\/td>\n192.168.30.254<\/td>\n255.255.255.0<\/td>\n–<\/td>\nVLAN30<\/td>\n<\/tr>\n
      \u4ea4\u6362\u673a SW1\uff08VLAN40\uff09<\/td>\n192.168.40.254<\/td>\n255.255.255.0<\/td>\n–<\/td>\nVLAN40<\/td>\n<\/tr>\n
      \u4ea4\u6362\u673a SW1\uff08VLAN50\uff09<\/td>\n192.168.1.254<\/td>\n255.255.255.0<\/td>\n–<\/td>\nVLAN50<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      2.\u4ea4\u6362\u673a\u7aef\u53e3\u89c4\u5212<\/b><\/strong><\/p>\n\n\n\n\n\n\n\n\n
      SW1 \u7aef\u53e3\u8303\u56f4<\/b><\/strong><\/td>\n\u7aef\u53e3\u6a21\u5f0f<\/b><\/strong><\/td>\n\u6240\u5c5e VLAN<\/b><\/strong><\/td>\n\u8fde\u63a5\u8bbe\u5907<\/b><\/strong><\/td>\n<\/tr>\n
      E0\/0\/1 – E0\/0\/5<\/td>\naccess<\/td>\nVLAN10<\/td>\n\u5f00\u53d1\u90e8 PC1<\/td>\n<\/tr>\n
      E0\/0\/6 – E0\/0\/15<\/td>\naccess<\/td>\nVLAN20<\/td>\n\u5e02\u573a\u90e8 PC2<\/td>\n<\/tr>\n
      E0\/0\/16 – E0\/0\/20<\/td>\naccess<\/td>\nVLAN30<\/td>\n\u8d22\u52a1\u90e8 PC3<\/td>\n<\/tr>\n
      G0\/0\/1<\/td>\naccess<\/td>\nVLAN40<\/td>\n\u8d22\u52a1\u7cfb\u7edf\u670d\u52a1\u5668<\/td>\n<\/tr>\n
      G0\/0\/2<\/td>\naccess<\/td>\nVLAN50<\/td>\n\u8def\u7531\u5668 AR1\uff08G0\/0\/0\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

       <\/p>\n

      \u4e94\u3001\u8be6\u7ec6\u914d\u7f6e\u6b65\u9aa4\uff08\u5168\u7a0b\u547d\u4ee4\u884c\uff09<\/b><\/strong><\/p>\n

      \u7b2c\u4e00\u6b65\uff1a\u914d\u7f6e\u4ea4\u6362\u673a VLAN \u53ca\u7aef\u53e3\u5212\u5206<\/b><\/strong><\/p>\n

      \u5148\u767b\u5f55 SW1 \u4ea4\u6362\u673a\uff0c\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u521b\u5efa VLAN \u5e76\u7ed1\u5b9a\u7aef\u53e3\uff08access \u6a21\u5f0f\u7528\u4e8e\u7ec8\u7aef\u63a5\u5165\uff09\uff1a<\/p>\n

      <Huawei>system-view \u00a0\/\/ \u8fdb\u5165\u7cfb\u7edf\u89c6\u56fe\n\n[Huawei]sysname SW1 \u00a0\/\/ \u91cd\u547d\u540d\u4ea4\u6362\u673a\uff08\u4fbf\u4e8e\u7ba1\u7406\uff09\n\n[SW1]vlan batch 10 20 30 40 50 \u00a0\/\/ \u6279\u91cf\u521b\u5efaVLAN10\/20\/30\/40\/50\n\n\/\/ \u914d\u7f6eE0\/0\/1-5\u7aef\u53e3\uff08\u5f00\u53d1\u90e8\uff09\u5c5e\u4e8eVLAN10\n\n[SW1]port-group group-member Ethernet 0\/0\/1 to Ethernet 0\/0\/5\n\n[SW1-port-group]port link-type access\n\n[SW1-port-group]port default vlan 10\n\n[SW1-port-group]quit\n\n\/\/ \u914d\u7f6eE0\/0\/6-15\u7aef\u53e3\uff08\u5e02\u573a\u90e8\uff09\u5c5e\u4e8eVLAN20\n\n[SW1]port-group group-member Ethernet 0\/0\/6 to Ethernet 0\/0\/15\n\n[SW1-port-group]port link-type access\n\n[SW1-port-group]port default vlan 20\n\n[SW1-port-group]quit\n\n\/\/ \u914d\u7f6eE0\/0\/16-20\u7aef\u53e3\uff08\u8d22\u52a1\u90e8\uff09\u5c5e\u4e8eVLAN30\n\n[SW1]port-group group-member Ethernet 0\/0\/16 to Ethernet 0\/0\/20\n\n[SW1-port-group]port link-type access\n\n[SW1-port-group]port default vlan 30\n\n[SW1-port-group]quit\n\n\/\/ \u914d\u7f6eG0\/0\/1\u7aef\u53e3\uff08\u8fde\u63a5\u8d22\u52a1\u670d\u52a1\u5668\uff09\u5c5e\u4e8eVLAN40\n\n[SW1]interface GigabitEthernet 0\/0\/1\n\n[SW1-GigabitEthernet0\/0\/1]port link-type access\n\n[SW1-GigabitEthernet0\/0\/1]port default vlan 40\n\n[SW1-GigabitEthernet0\/0\/1]quit\n\n\/\/ \u914d\u7f6eG0\/0\/2\u7aef\u53e3\uff08\u8fde\u63a5\u8def\u7531\u5668\uff09\u5c5e\u4e8eVLAN50\n\n[SW1]interface GigabitEthernet 0\/0\/2\n\n[SW1-GigabitEthernet0\/0\/2]port link-type access\n\n[SW1-GigabitEthernet0\/0\/2]port default vlan 50\n\n[SW1-GigabitEthernet0\/0\/2]quit<\/pre>\n
      \u7b2c\u4e8c\u6b65\uff1a\u914d\u7f6e\u4ea4\u6362\u673a VLAN \u865a\u63a5\u53e3 IP\uff08\u7f51\u5173\uff09<\/b><\/strong><\/p>\n
      \u5404\u90e8\u95e8 PC \u7684\u7f51\u5173\u6307\u5411\u4ea4\u6362\u673a\u5bf9\u5e94 VLAN \u7684\u865a\u63a5\u53e3\uff0c\u9700\u4e3a\u6bcf\u4e2a VLAN \u914d\u7f6e IP\uff1a<\/p>\n
      \/\/ \u914d\u7f6eVLAN10\u865a\u63a5\u53e3\uff08\u5f00\u53d1\u90e8\u7f51\u5173\uff09\n\n[SW1]interface Vlanif 10\n\n[SW1-Vlanif10]ip address 192.168.10.254 255.255.255.0\n\n[SW1-Vlanif10]quit\n\n\/\/ \u914d\u7f6eVLAN20\u865a\u63a5\u53e3\uff08\u5e02\u573a\u90e8\u7f51\u5173\uff09\n\n[SW1]interface Vlanif 20\n\n[SW1-Vlanif20]ip address 192.168.20.254 255.255.255.0\n\n[SW1-Vlanif20]quit\n\n\/\/ \u914d\u7f6eVLAN30\u865a\u63a5\u53e3\uff08\u8d22\u52a1\u90e8\u7f51\u5173\uff09\n\n[SW1]interface Vlanif 30\n\n[SW1-Vlanif30]ip address 192.168.30.254 255.255.255.0\n\n[SW1-Vlanif30]quit\n\n\/\/ \u914d\u7f6eVLAN40\u865a\u63a5\u53e3\uff08\u8d22\u52a1\u670d\u52a1\u5668\u7f51\u5173\uff09\n\n[SW1]interface Vlanif 40\n\n[SW1-Vlanif40]ip address 192.168.40.254 255.255.255.0\n\n[SW1-Vlanif40]quit\n\n\/\/ \u914d\u7f6eVLAN50\u865a\u63a5\u53e3\uff08\u8fde\u63a5\u8def\u7531\u5668\uff09\n\n[SW1]interface Vlanif 50\n\n[SW1-Vlanif50]ip address 192.168.1.254 255.255.255.0\n\n[SW1-Vlanif50]quit<\/pre>\n
      \u7b2c\u4e09\u6b65\uff1a\u914d\u7f6e\u4ea4\u6362\u673a\u9ed8\u8ba4\u8def\u7531\uff08\u6307\u5411\u8def\u7531\u5668\uff09<\/b><\/strong><\/p>\n
      \u8ba9\u5185\u7f51\u6240\u6709\u6d41\u91cf\u901a\u8fc7\u8def\u7531\u5668\u8bbf\u95ee\u5916\u90e8\uff0c\u9ed8\u8ba4\u8def\u7531\u4e0b\u4e00\u8df3\u4e3a\u8def\u7531\u5668 G0\/0\/0 \u63a5\u53e3 IP\uff1a<\/p>\n
      [SW1]ip route-static 0.0.0.0 0.0.0.0 192.168.1.1\n\n\/\/ \u8bf4\u660e\uff1a0.0.0.0 0.0.0.0\u8868\u793a\u6240\u6709\u7f51\u6bb5\uff0c\u4e0b\u4e00\u8df3192.168.1.1\u662f\u8def\u7531\u5668\u63a5\u53e3IP<\/pre>\n
      \u56db\u3001ACL \u89c4\u5219\u914d\u7f6e\uff08\u5168\u573a\u666f\uff1a\u51fa\u53e3 + \u5165\u53e3\uff09<\/b><\/strong><\/h2>\n
      \u5148\u641e\u61c2\u4e24\u4e2a\u6838\u5fc3\u533a\u522b\uff01<\/b><\/strong><\/h3>\n
      \u5728\u5f00\u59cb\u914d\u7f6e\u524d\uff0c\u5148\u660e\u786e\u4e24\u4e2a\u5173\u952e\u6982\u5ff5\uff0c\u907f\u514d\u914d\u7f6e\u6df7\u4e71\uff1a<\/p>\n
      \u57fa\u672c ACL\uff08ACL 2000\uff09vs \u9ad8\u7ea7 ACL\uff08ACL 3000\uff09<\/b><\/strong><\/p>\n\n\n\n\n\n\n\n\n
      \u5bf9\u6bd4\u7ef4\u5ea6<\/b><\/strong><\/td>\n\u57fa\u672c ACL\uff08\u4ee5 ACL 2000 \u4e3a\u4f8b\uff09<\/b><\/strong><\/td>\n\u9ad8\u7ea7 ACL\uff08\u4ee5 ACL 3000 \u4e3a\u4f8b\uff09<\/b><\/strong><\/td>\n<\/tr>\n
      \u7f16\u53f7\u8303\u56f4<\/td>\n2000-2999<\/td>\n3000-3999<\/td>\n<\/tr>\n
      \u7ba1\u63a7\u7ef4\u5ea6<\/td>\n\u4ec5\u57fa\u4e8e\u6e90 IP \u5730\u5740<\/strong>\u7ba1\u63a7\uff0c\u903b\u8f91\u7b80\u5355<\/td>\n\u57fa\u4e8e\u6e90 IP + \u76ee\u7684 IP + \u534f\u8bae + \u7aef\u53e3<\/strong>\u7cbe\u7ec6\u5316\u7ba1\u63a7<\/td>\n<\/tr>\n
      \u9002\u7528\u573a\u666f<\/td>\n\u7b80\u5355\u7684\u7f51\u6bb5\u7ea7\u6743\u9650\u63a7\u5236\uff08\u5982 \u201c\u5141\u8bb8\u6240\u6709\u90e8\u95e8\u8bbf\u95ee\u5916\u7f51\u201d\uff09<\/td>\n\u590d\u6742\u7684\u8d44\u6e90\u7ea7\u6743\u9650\u63a7\u5236\uff08\u5982 \u201c\u4ec5\u5141\u8bb8\u8d22\u52a1\u90e8\u8bbf\u95ee\u670d\u52a1\u5668 80 \u7aef\u53e3\u201d\uff09<\/td>\n<\/tr>\n
      \u914d\u7f6e\u8981\u70b9<\/td>\n\u65e0\u9700\u6307\u5b9a\u76ee\u7684 IP \/ \u7aef\u53e3\uff0c\u9ed8\u8ba4\u9690\u542b deny all<\/td>\n\u5fc5\u987b\u660e\u786e\u76ee\u7684 IP \/ \u7aef\u53e3\uff0c\u907f\u514d\u8bef\u62e6\u622a\u5176\u4ed6\u6d41\u91cf<\/td>\n<\/tr>\n
      \u6838\u5fc3\u4f18\u52bf<\/td>\n\u914d\u7f6e\u7b80\u6d01\uff0c\u9002\u5408\u5927\u8303\u56f4\u7f51\u6bb5\u7ba1\u63a7<\/td>\n\u7ba1\u63a7\u7cbe\u51c6\uff0c\u80fd\u7cbe\u51c6\u9650\u5236\u7279\u5b9a\u670d\u52a1 \/ \u7aef\u53e3<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      \u51fa\u53e3\u89c4\u5219 vs \u5165\u53e3\u89c4\u5219<\/b><\/strong><\/p>\n\n\n\n\n\n\n\n\n
      \u5bf9\u6bd4\u7ef4\u5ea6<\/b><\/strong><\/td>\n\u51fa\u53e3\u89c4\u5219\uff08Outbound\uff09<\/b><\/strong><\/td>\n\u5165\u53e3\u89c4\u5219\uff08Inbound\uff09<\/b><\/strong><\/td>\n<\/tr>\n
      \u5e94\u7528\u4f4d\u7f6e<\/td>\n\u6d41\u91cf \u201c\u79bb\u5f00\u201d \u8bbe\u5907\u7aef\u53e3\u65f6\u751f\u6548\uff08\u5982 SW1\u2192AR1 \u7684 G0\/0\/2 \u7aef\u53e3\uff09<\/td>\n\u6d41\u91cf \u201c\u8fdb\u5165\u201d \u8bbe\u5907\u7aef\u53e3\u65f6\u751f\u6548\uff08\u5982 PC\u2192SW1 \u7684\u90e8\u95e8\u63a5\u5165\u7aef\u53e3\uff09<\/td>\n<\/tr>\n
      \u903b\u8f91\u987a\u5e8f<\/td>\n\u5148\u8f6c\u53d1\u6d41\u91cf\uff0c\u518d\u6821\u9a8c\u89c4\u5219<\/td>\n\u5148\u6821\u9a8c\u89c4\u5219\uff0c\u518d\u8f6c\u53d1\u6d41\u91cf<\/td>\n<\/tr>\n
      \u8d44\u6e90\u5360\u7528<\/td>\n\u65e0\u6548\u6d41\u91cf\u5df2\u8fdb\u5165\u8bbe\u5907\uff0c\u4f1a\u5360\u7528\u5c11\u91cf\u8f6c\u53d1\u8d44\u6e90<\/td>\n\u65e0\u6548\u6d41\u91cf\u76f4\u63a5\u88ab\u62e6\u622a\uff0c\u4e0d\u5360\u7528\u540e\u7eed\u8f6c\u53d1\u8d44\u6e90<\/td>\n<\/tr>\n
      \u914d\u7f6e\u6548\u7387<\/td>\n\u96c6\u4e2d\u914d\u7f6e\u5728\u6838\u5fc3\u7aef\u53e3\uff08\u5982\u5916\u7f51\u51fa\u53e3\uff09\uff0c\u65e0\u9700\u91cd\u590d\u64cd\u4f5c<\/td>\n\u9700\u5e94\u7528\u5728\u591a\u4e2a\u63a5\u5165\u7aef\u53e3\uff08\u5982\u5404\u90e8\u95e8\u7aef\u53e3\uff09\uff0c\u4f46\u8f6c\u53d1\u6548\u7387\u66f4\u9ad8<\/td>\n<\/tr>\n
      \u9002\u7528\u573a\u666f<\/td>\n\u90e8\u95e8\u5c11\u3001\u6d41\u91cf\u5c0f\u7684\u7f51\u7edc\uff0c\u8ffd\u6c42\u914d\u7f6e\u4fbf\u6377<\/td>\n\u90e8\u95e8\u591a\u3001\u6d41\u91cf\u5927\u7684\u7f51\u7edc\uff0c\u8ffd\u6c42\u8f6c\u53d1\u6548\u7387\uff1b\u670d\u52a1\u5668\u9632\u62a4\u573a\u666f\uff08\u9760\u8fd1\u76ee\u6807\u8bbe\u5907\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
       <\/p>\n
      1. ACL 2000\uff08\u6838\u5fc3\u76ee\u6807\uff1a\u7ba1\u63a7\u90e8\u95e8\u8bbf\u95ee\u5916\u90e8\u7f51\u7edc\uff0c\u7b26\u5408\u9700\u6c42 3 \u201c\u6240\u6709\u90e8\u95e8\u53ef\u8bbf\u95ee\u5916\u90e8\u201d\uff09<\/b><\/strong><\/h3>\n
      \u573a\u666f\u8bf4\u660e<\/b><\/strong><\/h4>\n
      \u6d41\u91cf\u8def\u5f84\uff1a\u90e8\u95e8 PC\u2192SW1\u2192AR1\u2192\u5916\u90e8\u7f51\u7edc\uff0c\u9700\u63a7\u5236 \u201c\u4ece SW1 \u5230 AR1\u201d \u6216 \u201c\u4ece PC \u5230 SW1\u201d \u7684\u6d41\u91cf\uff0c\u5bf9\u5e94\u51fa\u53e3\u89c4\u5219<\/strong>\u548c\u5165\u53e3\u89c4\u5219<\/strong>\u3002<\/p>\n
      \uff081\uff09\u51fa\u53e3\u89c4\u5219\uff08\u5e94\u7528\u5728 \u201cSW1\u2192AR1\u201d \u7684\u51fa\u53e3\uff0c\u5373 SW1 \u7684 G0\/0\/2 \u7aef\u53e3 outbound\uff09<\/b><\/strong><\/h4>\n
        \n
      • \u903b\u8f91\uff1a\u6d41\u91cf\u4ece SW1 \u7684 G0\/0\/2 \u7aef\u53e3 \u201c\u51fa\u53bb\u201d \u5230 AR1 \u65f6\uff0c\u6821\u9a8c\u662f\u5426\u5141\u8bb8\u8bbf\u95ee\u5916\u90e8\uff1b<\/li>\n
      • \u4f18\u52bf\uff1a\u96c6\u4e2d\u7ba1\u63a7\u6240\u6709\u90e8\u95e8\u7684\u5916\u7f51\u51fa\u53e3\u6d41\u91cf\uff0c\u914d\u7f6e\u7b80\u5355\uff1b<\/li>\n
      • \u547d\u4ee4\uff1a<\/li>\n<\/ul>\n
        1. \u521b\u5efaACL 2000\uff08\u57fa\u672cACL\uff0c\u57fa\u4e8e\u6e90IP\u7ba1\u63a7\uff09\n\n[SW1]acl number 2000\n\n# \u5141\u8bb8\u5f00\u53d1\u90e8\uff0810.0\/24\uff09\u8bbf\u95ee\u5916\u90e8\n\n[SW1-acl-basic-2000]rule permit source 192.168.10.0 0.0.0.255\n\n# \u5141\u8bb8\u5e02\u573a\u90e8\uff0820.0\/24\uff09\u8bbf\u95ee\u5916\u90e8\n\n[SW1-acl-basic-2000]rule permit source 192.168.20.0 0.0.0.255\n\n# \u5141\u8bb8\u8d22\u52a1\u90e8\uff0830.0\/24\uff09\u8bbf\u95ee\u5916\u90e8\n\n[SW1-acl-basic-2000]rule permit source 192.168.30.0 0.0.0.255\n\n# ACL\u9ed8\u8ba4\u9690\u542bdeny all\uff0c\u65e0\u9700\u989d\u5916\u914d\u7f6e\n\n[SW1-acl-basic-2000]quit\n\n\n2. \u5e94\u7528\u5230SW1\u7684G0\/0\/2\u7aef\u53e3\uff08\u8fdeAR1\uff09\u51fa\u53e3\u65b9\u5411\n\n[SW1]interface GigabitEthernet 0\/0\/2\n\n[SW1-GigabitEthernet0\/0\/2]traffic-filter outbound acl 2000\n\n[SW1-GigabitEthernet0\/0\/2]quit<\/pre>\n
        \uff082\uff09\u5165\u53e3\u89c4\u5219\uff08\u5e94\u7528\u5728 \u201cPC\u2192SW1\u201d \u7684\u5165\u53e3\uff0c\u5373\u5404\u90e8\u95e8\u63a5\u5165\u7aef\u53e3 inbound\uff09<\/b><\/strong><\/h4>\n
          \n
        • \u903b\u8f91\uff1a\u6d41\u91cf\u4ece\u90e8\u95e8 PC \u201c\u8fdb\u5165\u201d SW1 \u7684\u63a5\u5165\u7aef\u53e3\u65f6\uff0c\u76f4\u63a5\u8fc7\u6ee4\u672a\u6388\u6743\u6d41\u91cf\uff0c\u51cf\u5c11 SW1 \u8f6c\u53d1\u538b\u529b\uff08\u5148\u8fc7\u6ee4\u518d\u8f6c\u53d1\uff09\uff1b<\/li>\n
        • \u4f18\u52bf\uff1a\u907f\u514d\u65e0\u6548\u6d41\u91cf\u5360\u7528\u4ea4\u6362\u673a\u8d44\u6e90\uff0c\u6392\u67e5\u95ee\u9898\u66f4\u7cbe\u51c6\uff1b<\/li>\n
        • \u547d\u4ee4\uff1a<\/li>\n<\/ul>\n
          1. \u6cbf\u7528ACL 2000\uff08\u89c4\u5219\u4e0d\u53d8\uff0c\u65e0\u9700\u91cd\u590d\u521b\u5efa\uff09\n\n\n\n2. \u5e94\u7528\u5230\u5f00\u53d1\u90e8\u5165\u53e3\u7aef\u53e3\uff08E0\/0\/1-5\uff09inbound\n\n[SW1]interface range Ethernet 0\/0\/1 to Ethernet 0\/0\/5\n\n[SW1-port-group]traffic-filter inbound acl 2000\n\n[SW1-port-group]quit\n\n3. \u5e94\u7528\u5230\u5e02\u573a\u90e8\u5165\u53e3\u7aef\u53e3\uff08E0\/0\/6-15\uff09inbound\n\n[SW1]interface range Ethernet 0\/0\/6 to Ethernet 0\/0\/15\n\n[SW1-port-group]traffic-filter inbound acl 2000\n\n[SW1-port-group]quit\n\n4. \u5e94\u7528\u5230\u8d22\u52a1\u90e8\u5165\u53e3\u7aef\u53e3\uff08E0\/0\/16-20\uff09inbound\n\n[SW1]port-group group-member Ethernet 0\/0\/16 to Ethernet 0\/0\/20\n\n[SW1-port-group]traffic-filter inbound acl 2000\n\n[SW1-port-group]quit<\/pre>\n
          \u9002\u7528\u573a\u666f\u9009\u62e9<\/b><\/strong><\/h4>\n
            \n
          • \u51fa\u53e3\u89c4\u5219\uff1a\u9002\u5408\u90e8\u95e8\u5c11\u3001\u6d41\u91cf\u5c0f\u7684\u7f51\u7edc\uff0c\u914d\u7f6e\u96c6\u4e2d\uff1b<\/li>\n
          • \u5165\u53e3\u89c4\u5219\uff1a\u9002\u5408\u90e8\u95e8\u591a\u3001\u6d41\u91cf\u5927\u7684\u7f51\u7edc\uff0c\u8f6c\u53d1\u6548\u7387\u9ad8\u3002<\/li>\n<\/ul>\n
            2.\u00a0<\/b>ACL 2001\uff08\u6838\u5fc3\u76ee\u6807\uff1a\u4ec5\u5141\u8bb8\u8d22\u52a1\u90e8\u8bbf\u95ee\u8d22\u52a1\u670d\u52a1\u5668\uff0c\u62d2\u7edd\u5f00\u53d1 \/ \u5e02\u573a\u90e8\uff09<\/b><\/strong><\/h3>\n
            \u573a\u666f\u8bf4\u660e<\/b><\/strong><\/h4>\n
            \u6d41\u91cf\u8def\u5f84\uff1a\u90e8\u95e8 PC\u2192SW1\u2192\u8d22\u52a1\u670d\u52a1\u5668\uff0c\u9700\u63a7\u5236 \u201c\u4ece SW1 \u5230\u670d\u52a1\u5668\u201d \u6216 \u201c\u4ece SW1 \u5230\u670d\u52a1\u5668\u201d \u7684\u6d41\u91cf\uff0c\u5bf9\u5e94\u51fa\u53e3\u89c4\u5219<\/strong>\u548c\u5165\u53e3\u89c4\u5219<\/strong>\u3002<\/p>\n
            \uff081\uff09\u51fa\u53e3\u89c4\u5219\uff08\u5e94\u7528\u5728 \u201cSW1\u2192\u670d\u52a1\u5668\u201d \u7684\u51fa\u53e3\uff0c\u5373 SW1 \u7684 G0\/0\/1 \u7aef\u53e3 outbound\uff09<\/b><\/strong><\/h4>\n
              \n
            • \u903b\u8f91\uff1a\u6d41\u91cf\u4ece SW1 \u7684 G0\/0\/1 \u7aef\u53e3 \u201c\u51fa\u53bb\u201d \u5230\u670d\u52a1\u5668\u65f6\uff0c\u6821\u9a8c\u6e90 IP \u662f\u5426\u4e3a\u8d22\u52a1\u90e8\uff1b<\/li>\n
            • \u547d\u4ee4\uff1a<\/li>\n<\/ul>\n
              1. \u521b\u5efaACL 2001\n\n[SW1]acl number 2001\n\n# \u5141\u8bb8\u8d22\u52a1\u90e8\uff0830.0\/24\uff09\u8bbf\u95ee\u670d\u52a1\u5668\n\n[SW1-acl-basic-2001]rule permit source 192.168.30.0 0.0.0.255\n\n# \u62d2\u7edd\u5f00\u53d1\u90e8\uff0810.0\/24\uff09\u8bbf\u95ee\u670d\u52a1\u5668\n\n[SW1-acl-basic-2001]rule deny source 192.168.10.0 0.0.0.255\n\n# \u62d2\u7edd\u5e02\u573a\u90e8\uff0820.0\/24\uff09\u8bbf\u95ee\u670d\u52a1\u5668\n\n[SW1-acl-basic-2001]rule deny source 192.168.20.0 0.0.0.255\n\n[SW1-acl-basic-2001]quit\n\n2. \u5e94\u7528\u5230SW1\u7684G0\/0\/1\u7aef\u53e3\uff08\u8fde\u670d\u52a1\u5668\uff09\u51fa\u53e3\u65b9\u5411\n\n[SW1]interface GigabitEthernet 0\/0\/1\n\n[SW1-GigabitEthernet0\/0\/1]traffic-filter outbound acl 2001\n\n[SW1-GigabitEthernet0\/0\/1]quit<\/pre>\n
              \uff082\uff09\u5165\u53e3\u89c4\u5219\uff08\u5e94\u7528\u5728 \u201cSW1\u2192\u670d\u52a1\u5668\u201d \u7684\u5165\u53e3\uff0c\u5373 SW1 \u7684 G0\/0\/1 \u7aef\u53e3 inbound\uff09<\/b><\/strong><\/h4>\n
                \n
              • \u903b\u8f91\uff1a\u6d41\u91cf\u4ece SW1 \u201c\u8fdb\u5165\u201d \u670d\u52a1\u5668\u7684\u7aef\u53e3\uff08G0\/0\/1\uff09\u65f6\uff0c\u76f4\u63a5\u8fc7\u6ee4\u975e\u8d22\u52a1\u90e8\u6d41\u91cf\uff0c\u670d\u52a1\u5668\u65e0\u9700\u5904\u7406\u65e0\u6548\u8bf7\u6c42\uff1b<\/li>\n
              • \u4f18\u52bf\uff1a\u51cf\u8f7b\u670d\u52a1\u5668\u538b\u529b\uff0c\u7b26\u5408 \u201c\u9760\u8fd1\u76ee\u6807\u8bbe\u5907\u914d\u7f6e ACL\u201d \u7684\u6700\u4f73\u5b9e\u8df5\uff1b<\/li>\n
              • \u547d\u4ee4\uff1a<\/li>\n<\/ul>\n
                1. \u6cbf\u7528ACL 2001\uff08\u89c4\u5219\u4e0d\u53d8\uff09\n\n\n\n2. \u5e94\u7528\u5230SW1\u7684G0\/0\/1\u7aef\u53e3\uff08\u8fde\u670d\u52a1\u5668\uff09\u5165\u53e3\u65b9\u5411\n\n[SW1]interface GigabitEthernet 0\/0\/1\n\n[SW1-GigabitEthernet0\/0\/1]traffic-filter inbound acl 2001\n\n[SW1-GigabitEthernet0\/0\/1]quit<\/pre>\n
                \u5173\u952e\u63d0\u9192<\/b><\/strong><\/h4>\n
                  \n
                • \u5165\u53e3\u89c4\u5219\u4f18\u5148\u9009 G0\/0\/1\uff08\u670d\u52a1\u5668\u63a5\u5165\u7aef\u53e3\uff09\uff0c\u800c\u975e\u90e8\u95e8\u7aef\u53e3\uff1a\u82e5\u5e94\u7528\u5230\u90e8\u95e8\u7aef\u53e3\uff0c\u9700\u91cd\u590d\u914d\u7f6e\u591a\u4e2a\u7aef\u53e3\uff0c\u6548\u7387\u4f4e\uff1b\u5e94\u7528\u5230\u670d\u52a1\u5668\u7aef\u53e3\uff0c\u4e00\u6b21\u914d\u7f6e\u5373\u53ef\u7ba1\u63a7\u6240\u6709\u8bbf\u95ee\u670d\u52a1\u5668\u7684\u6d41\u91cf\u3002<\/li>\n<\/ul>\n
                  3. ACL 3000\uff08\u9ad8\u7ea7 ACL\uff1a\u4ec5\u5141\u8bb8\u8d22\u52a1\u90e8\u8bbf\u95ee\u670d\u52a1\u5668 80 \u7aef\u53e3\uff0c\u7981\u6b62\u5176\u4ed6\u7aef\u53e3\uff09<\/b><\/strong><\/h3>\n
                  \u573a\u666f\u8bf4\u660e<\/b><\/strong><\/h4>\n
                  \u9700\u57fa\u4e8e \u201c\u6e90 IP + \u76ee\u7684 IP + \u76ee\u7684\u7aef\u53e3 + \u534f\u8bae\u201d \u7ba1\u63a7\uff0c\u4ec5\u5141\u8bb8\u8d22\u52a1\u90e8\u901a\u8fc7 TCP 80 \u7aef\u53e3\uff08HTTP\uff09\u8bbf\u95ee\u670d\u52a1\u5668\uff0c\u5bf9\u5e94\u51fa\u53e3\u89c4\u5219<\/strong>\u548c\u5165\u53e3\u89c4\u5219<\/strong>\u3002<\/p>\n
                  \uff081\uff09\u51fa\u53e3\u89c4\u5219\uff08\u5e94\u7528\u5728 \u201cSW1\u2192\u670d\u52a1\u5668\u201d \u7684\u51fa\u53e3\uff0cG0\/0\/1 outbound\uff09<\/b><\/strong><\/h4>\n
                    \n
                  • \u903b\u8f91\uff1a\u6d41\u91cf\u4ece SW1 \u5230\u670d\u52a1\u5668\u65f6\uff0c\u6821\u9a8c \u201c\u662f\u5426\u4e3a\u8d22\u52a1\u90e8 + TCP 80 \u7aef\u53e3\u201d\uff1b<\/li>\n
                  • \u547d\u4ee4\uff1a<\/li>\n<\/ul>\n
                    1. \u521b\u5efaACL 3000\uff08\u9ad8\u7ea7ACL\uff0c\u7f16\u53f73000-3999\uff09\n\n[SW1]acl number 3000\n\n# \u5141\u8bb8\u8d22\u52a1\u90e8\uff0830.0\/24\uff09\u901a\u8fc7TCP\u8bbf\u95ee\u670d\u52a1\u5668\uff0840.1\uff09\u768480\u7aef\u53e3\uff0c0 \u662f\u53cd\u63a9\u7801\uff0c\u8868\u793a\u7cbe\u786e\u5339\u914d\u8be5 IP\n\n[SW1-acl-adv-3000]rule permit tcp source 192.168.30.0 0.0.0.255 destination 192.168.40.1 0 destination-port eq 80\n\n# \u62d2\u7edd\u6240\u6709\u5176\u4ed6IP\u6d41\u91cf\uff08\u907f\u514d\u5176\u4ed6\u7aef\u53e3\u8bbf\u95ee\uff09\n\n[SW1-acl-adv-3000]rule deny ip\n\n[SW1-acl-adv-3000]quit\n\n2. \u5e94\u7528\u5230G0\/0\/1\u7aef\u53e3\u51fa\u53e3\u65b9\u5411\n\n[SW1]interface GigabitEthernet 0\/0\/1\n\n[SW1-GigabitEthernet0\/0\/1]traffic-filter outbound acl 3000\n\n[SW1-GigabitEthernet0\/0\/1]quit<\/pre>\n
                    \uff082\uff09\u5165\u53e3\u89c4\u5219\uff08\u5e94\u7528\u5728 \u201cSW1\u2192\u670d\u52a1\u5668\u201d \u7684\u5165\u53e3\uff0cG0\/0\/1 inbound\uff09<\/b><\/strong><\/h4>\n
                      \n
                    • \u903b\u8f91\uff1a\u6d41\u91cf\u8fdb\u5165\u670d\u52a1\u5668\u7aef\u53e3\u65f6\uff0c\u76f4\u63a5\u62e6\u622a\u975e 80 \u7aef\u53e3\u7684\u8bf7\u6c42\uff0c\u670d\u52a1\u5668\u4ec5\u5904\u7406\u5408\u6cd5 HTTP \u6d41\u91cf\uff1b<\/li>\n
                    • \u547d\u4ee4\uff1a<\/li>\n<\/ul>\n
                      1. \u6cbf\u7528ACL 3000\uff08\u89c4\u5219\u4e0d\u53d8\uff09\n\n\u00a0\n\n2. \u5e94\u7528\u5230G0\/0\/1\u7aef\u53e3\u5165\u53e3\u65b9\u5411\n\n[SW1]interface GigabitEthernet 0\/0\/1\n\n[SW1-GigabitEthernet0\/0\/1]traffic-filter inbound acl 3000\n\n[SW1-GigabitEthernet0\/0\/1]quit<\/pre>\n
                      \u6ce8\u610f\u4e8b\u9879<\/b><\/strong><\/h4>\n
                        \n
                      • \u9ad8\u7ea7 ACL \u5fc5\u987b\u660e\u786e \u201cdestination\u201d\uff08\u76ee\u7684 IP\uff09\uff0c\u5426\u5219\u4f1a\u8bef\u62e6\u622a\u5176\u4ed6\u8bbe\u5907\u7684 80 \u7aef\u53e3\u6d41\u91cf\uff08\u5982\u5916\u90e8\u7f51\u7edc\u7684 Web \u670d\u52a1\u5668\uff09\u3002<\/li>\n<\/ul>\n
                        4. ACL 3001\uff08\u9ad8\u7ea7 ACL\uff1a\u7981\u6b62\u8d22\u52a1\u670d\u52a1\u5668\u8bbf\u95ee\u5e02\u573a\u90e8\u7f51\u6bb5\uff09<\/b><\/strong><\/h3>\n
                        \u573a\u666f\u8bf4\u660e<\/b><\/strong><\/h4>\n
                        \u9700\u7ba1\u63a7 \u201c\u670d\u52a1\u5668\u2192\u5e02\u573a\u90e8\u201d \u7684\u53cd\u5411\u6d41\u91cf\uff0c\u7981\u6b62\u670d\u52a1\u5668\u4e3b\u52a8\u8bbf\u95ee\u5e02\u573a\u90e8\uff0820.0\/24\uff09\uff0c\u5bf9\u5e94\u51fa\u53e3\u89c4\u5219<\/strong>\u548c\u5165\u53e3\u89c4\u5219<\/strong>\u3002<\/p>\n
                        \uff081\uff09\u51fa\u53e3\u89c4\u5219\uff08\u5e94\u7528\u5728 \u201c\u5e02\u573a\u90e8 PC\u2192SW1\u201d \u7684\u51fa\u53e3\uff0c\u5373\u5e02\u573a\u90e8\u7aef\u53e3 outbound\uff09<\/b><\/strong><\/h4>\n
                          \n
                        • \u903b\u8f91\uff1a\u6d41\u91cf\u4ece\u5e02\u573a\u90e8\u7aef\u53e3 \u201c\u51fa\u53bb\u201d \u5230 SW1 \u5185\u7f51\u65f6\uff0c\u62d2\u7edd\u670d\u52a1\u5668\uff0840.0\/24\uff09\u7684\u6d41\u91cf\uff1b<\/li>\n
                        • \u547d\u4ee4\uff1a<\/li>\n<\/ul>\n
                          1. \u521b\u5efaACL 3001\n\n[SW1]acl number 3001\n\n# \u62d2\u7edd\u670d\u52a1\u5668\u7f51\u6bb5\uff0840.0\/24\uff09\u8bbf\u95ee\u5e02\u573a\u90e8\u7f51\u6bb5\uff0820.0\/24\uff09\n\n[SW1-acl-adv-3001]rule deny ip source 192.168.40.0 0.0.0.255 destination 192.168.20.0 0.0.0.255\n\n# \u5141\u8bb8\u5176\u4ed6\u6240\u6709\u6d41\u91cf\uff08\u4e0d\u5f71\u54cd\u5e02\u573a\u90e8\u8bbf\u95ee\u5176\u4ed6\u8d44\u6e90\uff09\n\n[SW1-acl-adv-3001]rule permit ip\n\n[SW1-acl-adv-3001]quit\n\n2. \u5e94\u7528\u5230\u5e02\u573a\u90e8\u5165\u53e3\u7aef\u53e3\uff08E0\/0\/6-15\uff09\u51fa\u53e3\u65b9\u5411\n\n[SW1]port-group group-member Ethernet 0\/0\/6 to 0\/0\/15\n\n[SW1-port-group]traffic-filter outbound acl 3001\n\n[SW1-port-group]quit<\/pre>\n
                          \uff082\uff09\u5165\u53e3\u89c4\u5219\uff08\u5e94\u7528\u5728 \u201c\u5e02\u573a\u90e8 PC\u2192SW1\u201d \u7684\u5165\u53e3\uff0c\u5373\u5e02\u573a\u90e8\u7aef\u53e3 inbound\uff09<\/b><\/strong><\/h4>\n
                            \n
                          • \u903b\u8f91\uff1a\u6d41\u91cf\u4ece SW1 \u201c\u8fdb\u5165\u201d \u5e02\u573a\u90e8\u7aef\u53e3\u65f6\uff0c\u76f4\u63a5\u62e6\u622a\u670d\u52a1\u5668\u7684\u6d41\u91cf\uff0c\u5e02\u573a\u90e8 PC \u4e0d\u4f1a\u6536\u5230\u670d\u52a1\u5668\u7684\u8bf7\u6c42\uff1b<\/li>\n
                          • \u547d\u4ee4\uff1a<\/li>\n<\/ul>\n
                            1. \u6cbf\u7528ACL 3001\uff08\u89c4\u5219\u4e0d\u53d8\uff09\n\n\u00a0\n\n2. \u5e94\u7528\u5230\u5e02\u573a\u90e8\u7aef\u53e3\u5165\u53e3\u65b9\u5411\n\n[SW1]port-group group-member Ethernet 0\/0\/6 to 0\/0\/15\n\n[SW1-port-group]traffic-filter inbound acl 3001\n\n[SW1-port-group]quit<\/pre>\n
                            \u4f18\u52bf\u5bf9\u6bd4<\/p>\n
                            \u5165\u53e3\u89c4\u5219\u66f4\u4f18\uff1a\u670d\u52a1\u5668\u6d41\u91cf\u5728 \u201c\u8fdb\u5165\u5e02\u573a\u90e8\u7aef\u53e3\u201d \u524d\u88ab\u62e6\u622a\uff0c\u5e02\u573a\u90e8 PC \u5b8c\u5168\u4e0d\u4f1a\u611f\u77e5\u5230\u65e0\u6548\u8bf7\u6c42\uff1b<\/p>\n
                            \u51fa\u53e3\u89c4\u5219\uff1a\u670d\u52a1\u5668\u6d41\u91cf\u5df2\u8fdb\u5165 SW1\uff0c\u4ec5\u5728 \u201c\u79bb\u5f00\u5e02\u573a\u90e8\u7aef\u53e3\u201d \u65f6\u88ab\u62e6\u622a\uff0c\u4f1a\u5360\u7528\u5c11\u91cf SW1 \u8f6c\u53d1\u8d44\u6e90\u3002<\/p>\n
                            \u4e94\u3001ACL \u914d\u7f6e\u9a8c\u8bc1\u6b65\u9aa4<\/p>\n
                            1.\u9a8c\u8bc1\u5916\u90e8\u7f51\u7edc\u8bbf\u95ee\uff08ACL 2000\uff09<\/p>\n
                            \u5f00\u53d1\u90e8 PC1\uff1aping 192.168.1.1\uff08AR1 \u63a5\u53e3 IP\uff09\uff0c\u5e94\u80fd ping \u901a\uff1b<\/p>\n
                            \u5e02\u573a\u90e8 PC2\uff1aping 192.168.1.1\uff0c\u5e94\u80fd ping \u901a\uff1b<\/p>\n
                            \u8d22\u52a1\u90e8 PC3\uff1aping 192.168.1.1\uff0c\u5e94\u80fd ping \u901a\uff1b<\/p>\n
                            \u67e5\u770b ACL \u5339\u914d\u6b21\u6570\uff1a[SW1]display acl 2000\uff0c\u201cpermit\u201d \u89c4\u5219\u7684 \u201c\u5339\u914d\u6b21\u6570\u201d \u5e94\u968f ping \u6d4b\u8bd5\u589e\u52a0\u3002<\/p>\n
                            2.\u9a8c\u8bc1\u670d\u52a1\u5668\u8bbf\u95ee\u6743\u9650\uff08ACL 2001\uff09<\/p>\n
                            \u8d22\u52a1\u90e8 PC3\uff1aping 192.168.40.1\uff0c\u5e94\u80fd ping \u901a\uff1btelnet 192.168.40.1 80\uff08\u82e5\u670d\u52a1\u5668\u5f00\u542f 80 \u7aef\u53e3\uff09\uff0c\u5e94\u80fd\u8fde\u63a5\uff1b<\/p>\n
                            \u5f00\u53d1\u90e8 PC1\uff1aping 192.168.40.1\uff0c\u5e94\u8d85\u65f6\uff1b<\/p>\n
                            \u67e5\u770b ACL \u5339\u914d\u6b21\u6570\uff1a[SW1]display acl 2001\uff0c\u8d22\u52a1\u90e8\u7684 \u201cpermit\u201d \u6b21\u6570\u589e\u52a0\uff0c\u5f00\u53d1 \/ \u5e02\u573a\u90e8\u7684 \u201cdeny\u201d \u6b21\u6570\u589e\u52a0\u3002<\/p>\n
                            3.\u9a8c\u8bc1\u670d\u52a1\u5668 80 \u7aef\u53e3\u8bbf\u95ee\uff08ACL 3000\uff09<\/p>\n
                            \u8d22\u52a1\u90e8 PC3\uff1a\u6253\u5f00\u6d4f\u89c8\u5668\u8f93\u5165http:\/\/192.168.40.1\uff08\u9700\u670d\u52a1\u5668\u5f00\u542f HTTP \u670d\u52a1\uff09\uff0c\u5e94\u80fd\u8bbf\u95ee\uff1b<\/p>\n
                            \u8d22\u52a1\u90e8 PC3\uff1atelnet 192.168.40.1 22\uff08SSH \u7aef\u53e3\uff09\uff0c\u5e94\u88ab\u62d2\u7edd\uff1b<\/p>\n
                            \u67e5\u770b ACL \u5339\u914d\u6b21\u6570\uff1a[SW1]display acl 3000\uff0c\u201cpermit tcp\u201d \u6b21\u6570\u589e\u52a0\uff0c\u201cdeny ip\u201d \u6b21\u6570\u589e\u52a0\uff08\u5bf9\u5e94 22 \u7aef\u53e3\u8bbf\u95ee\uff09\u3002<\/p>\n
                            4.\u9a8c\u8bc1\u670d\u52a1\u5668\u8bbf\u95ee\u5e02\u573a\u90e8\uff08ACL 3001\uff09<\/p>\n
                            \u5728\u8d22\u52a1\u670d\u52a1\u5668\u4e0a\u6267\u884c\uff1aping 192.168.20.1\uff08\u5e02\u573a\u90e8 PC2\uff09\uff0c\u5e94\u8d85\u65f6\uff1b<\/p>\n
                            \u67e5\u770b ACL \u5339\u914d\u6b21\u6570\uff1a[SW1]display acl 3001\uff0c\u201cdeny ip\u201d \u6b21\u6570\u5e94\u589e\u52a0\uff1b<\/p>\n
                            \u5e02\u573a\u90e8 PC2\uff1aping 192.168.40.1\uff0c\u5e94\u80fd ping \u901a\uff08ACL 3001 \u4ec5\u7981\u6b62\u670d\u52a1\u5668\u2192\u5e02\u573a\u90e8\uff0c\u4e0d\u5f71\u54cd\u5e02\u573a\u90e8\u2192\u670d\u52a1\u5668\u7684\u53cd\u5411\u6d41\u91cf\uff0c\u82e5\u9700\u7981\u6b62\u53ef\u8865\u5145\u89c4\u5219\uff09\u3002<\/p>\n
                            \u516d\u3001ACL \u914d\u7f6e\u907f\u5751\u6307\u5357<\/p>\n
                            \u89c4\u5219\u987a\u5e8f\u4e0d\u53ef\u4e71\uff1aACL \u6309 \u201c\u81ea\u4e0a\u800c\u4e0b\u201d \u6267\u884c\uff0c\u201cpermit\u201d \u89c4\u5219\u9700\u653e\u5728 \u201cdeny\u201d \u89c4\u5219\u524d\uff08\u5982 ACL 2001 \u9700\u5148\u5141\u8bb8\u8d22\u52a1\u90e8\uff0c\u518d\u62d2\u7edd\u5176\u4ed6\u90e8\u95e8\uff09\uff1b<\/p>\n
                            \u7aef\u53e3\u65b9\u5411\u4e0d\u51b2\u7a81\uff1a\u4e00\u4e2a\u7aef\u53e3\u7684\u4e00\u4e2a\u65b9\u5411\uff08inbound\/outbound\uff09\u53ea\u80fd\u7ed1\u5b9a 1 \u4e2a ACL\uff0c\u82e5\u9700\u66ff\u6362\uff0c\u9700\u5148\u53d6\u6d88\u65e7 ACL\uff1a[SW1-if]undo traffic-filter inbound acl XXX\uff1b<\/p>\n
                            \u9ad8\u7ea7 ACL \u5fc5\u5e26\u76ee\u7684 IP\uff1a\u907f\u514d\u8bef\u62e6\u622a\u5176\u4ed6\u8bbe\u5907\uff08\u5982 ACL 3000 \u5fc5\u987b\u5199 \u201cdestination 192.168.40.1\u201d\uff0c\u5426\u5219\u4f1a\u7981\u6b62\u8d22\u52a1\u90e8\u8bbf\u95ee\u5176\u4ed6 Web \u670d\u52a1\u5668\uff09\uff1b<\/p>\n
                            \u57fa\u7840 ACL \u9009\u6e90 IP\uff0c\u9ad8\u7ea7 ACL \u9009\u7cbe\u51c6\u5339\u914d\uff1a\u57fa\u7840 ACL\uff082000-2999\uff09\u4ec5\u80fd\u57fa\u4e8e\u6e90 IP\uff0c\u9002\u5408\u7b80\u5355\u7ba1\u63a7\uff1b\u9ad8\u7ea7 ACL\uff083000-3999\uff09\u652f\u6301 IP + \u7aef\u53e3 + \u534f\u8bae\uff0c\u9002\u5408\u7cbe\u7ec6\u5316\u7ba1\u63a7\u3002<\/p>\n
                            \u4e03\u3001\u603b\u7ed3<\/p>\n
                            \u672c\u6587\u9488\u5bf9\u6bcf\u4e2a ACL \u89c4\u5219\uff0c\u5747\u63d0\u4f9b\u4e86\u51fa\u53e3 + \u5165\u53e3\u4e24\u79cd\u914d\u7f6e\u65b9\u6848\uff0c\u6838\u5fc3\u903b\u8f91\u5982\u4e0b\uff1a<\/p>\n\n\n\n\n\n\n
                            ACL \u7c7b\u578b<\/th>\n\u51fa\u53e3\u89c4\u5219\u4f18\u52bf<\/th>\n\u5165\u53e3\u89c4\u5219\u4f18\u52bf<\/th>\n\u63a8\u8350\u573a\u666f<\/th>\n<\/tr>\n<\/thead>\n
                            \u57fa\u7840 ACL<\/td>\n\u914d\u7f6e\u96c6\u4e2d\uff0c\u65e0\u9700\u91cd\u590d\u64cd\u4f5c\uff0c\u9002\u5408\u5feb\u901f\u90e8\u7f72<\/td>\n\u5148\u8fc7\u6ee4\u518d\u8f6c\u53d1\uff0c\u63d0\u524d\u62e6\u622a\u65e0\u6548\u6d41\u91cf\uff0c\u51cf\u5c11\u8bbe\u5907\u8f6c\u53d1\u8d44\u6e90\u5360\u7528<\/td>\n1. \u51fa\u53e3\u89c4\u5219\uff1a\u90e8\u95e8\u6570\u91cf\u5c11\uff08\u22643 \u4e2a\uff09\u3001\u7f51\u7edc\u6d41\u91cf\u5c0f\uff08\u2264100M\uff09\uff0c\u8ffd\u6c42\u914d\u7f6e\u4fbf\u6377\u6027\uff1b<\/p>\n
                            <\/div>\n
                            2. \u5165\u53e3\u89c4\u5219\uff1a\u90e8\u95e8\u6570\u91cf\u591a\uff08\u22655 \u4e2a\uff09\u3001\u7f51\u7edc\u6d41\u91cf\u5927\uff08\u2265100M\uff09\uff0c\u8ffd\u6c42\u8f6c\u53d1\u6548\u7387\u548c\u95ee\u9898\u6392\u67e5\u7cbe\u51c6\u5ea6<\/td>\n<\/tr>\n
                            \u9ad8\u7ea7 ACL<\/td>\n\u4fbf\u4e8e\u76d1\u63a7\u51fa\u53e3\u65b9\u5411\u6d41\u91cf\u5339\u914d\u60c5\u51b5\uff0c\u6392\u67e5\u8de8\u7f51\u6bb5 \/ \u7aef\u53e3\u7ea7\u6d41\u91cf\u95ee\u9898<\/td>\n\u9760\u8fd1\u76ee\u6807\u8bbe\u5907\uff08\u5982\u670d\u52a1\u5668\u3001\u90e8\u95e8\u63a5\u5165\u7aef\u53e3\uff09\uff0c\u76f4\u63a5\u62e6\u622a\u975e\u6cd5\u6d41\u91cf\uff0c\u51cf\u8f7b\u76ee\u6807\u8bbe\u5907\uff08\u670d\u52a1\u5668\u3001\u6838\u5fc3\u4ea4\u6362\u673a\uff09\u7684\u5904\u7406\u538b\u529b<\/td>\n\u670d\u52a1\u5668\u9632\u62a4\u3001\u7aef\u53e3\u7ea7\u7cbe\u7ec6\u5316\u7ba1\u63a7\uff08\u5982\u4ec5\u5f00\u653e\u7279\u5b9a\u670d\u52a1\u7aef\u53e3\uff09\u3001\u53cd\u5411\u6d41\u91cf\u63a7\u5236\uff08\u5982\u7981\u6b62\u670d\u52a1\u5668\u8bbf\u95ee\u7279\u5b9a\u7f51\u6bb5\uff09\uff0c\u4f18\u5148\u9009\u62e9\u5165\u53e3\u89c4\u5219<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
                            \u5b9e\u9645\u914d\u7f6e\u65f6\uff0c\u53ef\u6839\u636e\u7f51\u7edc\u89c4\u6a21\u3001\u6d41\u91cf\u5927\u5c0f\u548c\u7ba1\u63a7\u7cbe\u5ea6\u9009\u62e9\u65b9\u5411\uff0c\u6838\u5fc3\u539f\u5219\uff1a\u9ad8\u7ea7 ACL \u4f18\u5148\u7528\u5165\u53e3\uff0c\u57fa\u7840 ACL \u6309\u9700\u9009\u5165\u53e3 \/ \u51fa\u53e3\uff0c\u907f\u514d\u89c4\u5219\u51b2\u7a81\u548c\u8d44\u6e90\u6d6a\u8d39\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
                            \u4e00\u3001\u5b9e\u9a8c\u73af\u5883 \u786c\u4ef6\u8bbe\u5907\uff1a1 \u53f0\u8def\u7531\u5668\uff08AR1\uff09\u30011 \u53f0\u4ea4\u6362\u673a\uff08SW1\uff09\u30011 \u53f0\u8d22\u52a1\u7cfb\u7edf\u670d\u52a1\u5668\u30013 \u53f0 PC\uff08\u5206\u522b\u5c5e\u4e8e\u5f00\u53d1\u90e8\u3001\u5e02\u573a\u90e8\u3001\u8d22\u52a1\u90e8\uff09 \u8f6f\u4ef6\u73af\u5883\uff1a\u534e\u4e3a eNSP \u6a21\u62df\u5668 \u6838\u5fc3\u76ee\u6807\uff1a\u901a\u8fc7 ACL\uff08\u8bbf\u95ee\u63a7\u5236\u5217\u8868\uff09\u5b9e\u73b0\u90e8\u95e8\u95f4\u8bbf\u95ee\u6743\u9650\u7ba1\u63a7\uff0c\u4fdd\u969c\u8d22\u52a1\u7cfb\u7edf\u670d\u52a1\u5668\u5b89\u5168 \u4e8c\u3001\u5b9e\u9a8c\u9700\u6c42 \u8d22\u52a1\u90e8\uff08PC3\uff09\u53ef\u6b63\u5e38\u8bbf…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[],"class_list":["post-794","post","type-post","status-publish","format-standard","hentry","category-30"],"_links":{"self":[{"href":"https:\/\/htmacg.cn\/index.php?rest_route=\/wp\/v2\/posts\/794","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/htmacg.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/htmacg.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/htmacg.cn\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/htmacg.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=794"}],"version-history":[{"count":0,"href":"https:\/\/htmacg.cn\/index.php?rest_route=\/wp\/v2\/posts\/794\/revisions"}],"wp:attachment":[{"href":"https:\/\/htmacg.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=794"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/htmacg.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=794"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/htmacg.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=794"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}