CISCO实验记录八：ACL访问控制

1、使用ACL实现免ping

#access-list 100 deny icmp 192.168.0.1 0.0.0.0 192.168.1.2 0.0.0.0

#access-list 100 permit ip any any

#show ip access-list

#interface gigabitEthernet 0/0/0

#ip access-group 100 in

 2、使用ACL实现免telnet

#access-list 100 deny tcp 192.168.0.1 0.0.0.0 192.168.1.2 0.0.0.0 eq 23

#access-list 100 permit ip any any

#show ip access-list

#interface gigabitEthernet 0/0/0

#ip access-group 100 in