弱弱的请教:
& B3 u8 G" T/ K6 ]0 t4 k0 r公司不让上开心,但有两个人业务需要,要上。: [- m/ G' |* W: q4 D9 V
: u @) `! E7 }, Y于是我就用扩展访问控制列表,先写允许,再写deny all.: y; z7 n3 }8 k! n3 n
3 Y! W+ w$ y3 c/ O+ N可是公司内网是DHCP分配的,只好给他们两人固定IP.
+ f8 u8 \4 D7 v( t5 x
6 D" a; }6 _( _7 d5 D# i于是乎,想到内否用基于MAC的访问控制?允许2个MAC访问开心,其余MAC不允许访问开心。
7 H' F' e' o( ^* R, V) d' v% F
/ ?; G) f* v' T但命令也好,网上讨论也好,都没有提过这方面。" S6 l/ a, Y7 D1 {! @
D% p0 F8 V5 ^8 X8 ^
求助大家了。9 b1 h' ~. w" {* r6 ?/ S$ i
ip access-list extended denyonline! ` @4 o; A/ q7 A6 D
deny ip host 123.125.44.242 host 192.168.40.22 H: K2 R* p- z( j, n. P4 K
deny ip host 123.125.56.245 host 192.168.40.2 V& [7 R+ G; _; d* H
deny ip host 123.125.58.247 host 192.168.40.28 G8 j7 y: o. P
deny ip host 123.125.58.246 host 192.168.40.2
8 I2 R- T8 C7 J3 c3 Z" k8 Ldeny ip host 123.125.59.16 host 192.168.40.23 {) K. v! R" W+ K
deny ip host 123.125.56.246 host 192.168.40.2
! M( V* c. Q' xdeny ip host 123.125.58.245 host 192.168.40.2. _+ j% P B+ m- _# u; w+ e9 q0 V$ Y
deny ip host 123.125.56.248 host 192.168.40.29 K, X' ?: u' O9 ?9 x0 p) J- }1 F( e
deny ip host 123.125.58.248 host 192.168.40.2
" \7 ~3 I) b/ J& W" Kdeny ip host 123.125.59.20 host 192.168.40.2
5 c1 c& z! ~' h' z+ {deny ip host 123.125.44.242 host 192.168.50.110" F# S# ]: f, y& w; p: h0 C& C
deny ip host 123.125.56.245 host 192.168.50.110
; F8 X1 z+ t. B3 T! ]deny ip host 123.125.58.247 host 192.168.50.110 b+ q6 F8 s* X6 i
deny ip host 123.125.58.246 host 192.168.50.1108 o1 S; \% I4 K; b7 G2 P% d+ B
deny ip host 123.125.59.16 host 192.168.50.110
v8 y/ L: J' Ndeny ip host 123.125.56.246 host 192.168.50.110
& q8 F; t+ V- j/ o3 W8 |# A5 u) Odeny ip host 123.125.58.245 host 192.168.50.110
' r" E, J% _7 k3 P( kdeny ip host 123.125.56.248 host 192.168.50.110
2 U$ d; H8 _8 ]. Sdeny ip host 123.125.58.248 host 192.168.50.110
( p# h, K4 n: m% z X7 m# e2 P% |deny ip host 123.125.59.20 host 192.168.50.1106 ?3 ~- n9 S! ~7 Q2 D# A
deny ip host 123.125.44.242 any* M/ h) u: a+ W4 Z2 ?3 x( F, ~
deny ip host 123.125.56.245 any" b& F" r: M8 L# @ l3 d/ c- ~
deny ip host 123.125.58.247 any2 [5 o( t2 L& s: @7 b
deny ip host 123.125.58.246 any9 p5 a8 o- s) E$ o7 ^3 I
deny ip host 123.125.59.16 any( Z9 c3 E# Y$ c( x+ B. Z9 k
deny ip host 123.125.56.246 any; R" v' F( A6 O! R0 b+ C' ~3 C% V, q
deny ip host 123.125.58.245 any
9 c8 h5 j7 ~) j, Z% b8 v- mdeny ip host 123.125.56.248 any
! M' A/ V2 A/ O! x$ N8 I& R( |deny ip host 123.125.58.248 any
& P$ c0 d! B8 \' N; ddeny ip host 123.125.59.20 any
8 A3 b' V. N4 U' `8 j1 |1 r" p
# }( |( N/ V2 \permit ip any any |