10 访问控制列表.ppt

文档介绍：访问控制列表Access Control List
深圳职业技术学院计算机系网络专业
教学目标( Objectives )
1. 访问控制列表(Access Control List)

( Configure standard IP access lists )
3. 配置扩展访问控制列表
( Configure extended IP access lists )

( Configure named IP access lists )
5. 验证和监视ACL
( Verify and monitor IP access lists )


当网络访问增长时,管理IP通信
Manage IP traffic work access grows
当数据包通过路由器时,起到过滤作用
Filter packets as they pass through the router
为什么使用ACL?(Why Use Access Control Lists?)
ACL作用( Function of ACL )
、提高网络性能。
work traffic and work performance.
。
Provide traffic flow control.
。
Provide a basic level of security work access.
,决定哪种类型的通信流量被转发、哪种类型的通信流量被阻塞。
Decide which types of traffic are forwarded or blocked at the router interfaces.
ACL如何工作(ACL How to work)
ACL条件顺序(The order in which ACL statements are placed )
ACL条件顺序(The order in which ACL statements are placed )
Cisco IOS按照各描述语句在ACL中的顺序,根据各描述语句的判断条件,对数据包进行检查。一旦找到了某一匹配条件,就结束比较过程,不再检查以后的其他条件判断语句。
The Cisco IOS software tests the packet against each condition statement in order from the top of the list to the bottom. Once a match is found in the list, the accept or reject action is performed and no other ACL statements are checked
什么是ACL?(What Are Access Lists?)
标准 ACL ( Standard ACL )
检查源地址(Checks Source address )
允许或拒绝整个协议族(Generally permits or denies entire protocol suite)
Outgoing
Packet
fa0/0
S0/0
ing
Packet
Access List Processes
Permit?
Source
扩展 ACL ( Extended ACL )
检查源和目的地址
( Checks Source and Destination address)
通常允许或拒绝特定的协议(Generally permits or denies specific protocols)
Outgoing
Packet
Fa0/0
s0/0
ing
Packet
Access List Processes
Permit?
Source
and Destination
Protocol
什么是ACL?(What Are Access Lists?)
用扩展ACL检查数据包(Check Packets with Extended ACL)