弱弱的请教:0 X0 U7 P5 p/ j; P6 z' A* D g2 ^; u
公司不让上开心,但有两个人业务需要,要上。- F% }" p% ?8 s d
4 J$ R4 G- C" J; z. ]7 R# l: B0 X) n于是我就用扩展访问控制列表,先写允许,再写deny all.
0 ^3 V2 p! y' n7 I- N4 l% ]
5 Q2 o! }) \* x* m+ t: a6 C可是公司内网是DHCP分配的,只好给他们两人固定IP.
! I( F5 C+ t+ t
9 G" }! S; T6 Q* C; @( S/ S于是乎,想到内否用基于MAC的访问控制?允许2个MAC访问开心,其余MAC不允许访问开心。( ^5 E0 L) E; B9 f
, D8 y7 |) F0 f但命令也好,网上讨论也好,都没有提过这方面。
! }1 n/ W7 {" ~( }
# f4 U1 v. h! `& n- _" ^5 ~2 A求助大家了。
; D0 N% E- e+ m/ Aip access-list extended denyonline; d' ?* ]" s2 L
deny ip host 123.125.44.242 host 192.168.40.2
! ]& R/ f, r+ W( l5 t d, Gdeny ip host 123.125.56.245 host 192.168.40.2) ?) M( v" O- ?' |) f0 u
deny ip host 123.125.58.247 host 192.168.40.2) D, g9 }7 _7 x* I2 Z
deny ip host 123.125.58.246 host 192.168.40.2
/ W& N! ]6 b& sdeny ip host 123.125.59.16 host 192.168.40.2" k" Z; V4 z% m6 E3 P* Z H9 S
deny ip host 123.125.56.246 host 192.168.40.26 l) A: D4 q5 C( p( z# q
deny ip host 123.125.58.245 host 192.168.40.2
" A3 O; S8 X# i; [: Y) ^) a' ]deny ip host 123.125.56.248 host 192.168.40.20 f, {2 h" A1 w2 l
deny ip host 123.125.58.248 host 192.168.40.2
1 c- w9 ~- ^: T. Adeny ip host 123.125.59.20 host 192.168.40.2% D2 Y! B' C9 e9 p3 c m7 z
deny ip host 123.125.44.242 host 192.168.50.1104 g; _5 g8 c! Y) M- F1 Z) s6 v4 w
deny ip host 123.125.56.245 host 192.168.50.110
: O" j6 N7 [) I$ U" e- Kdeny ip host 123.125.58.247 host 192.168.50.110
+ ]9 N# Y! D! B8 n3 A$ F+ {0 v3 Kdeny ip host 123.125.58.246 host 192.168.50.110
6 ?% P! z; g* D7 S6 zdeny ip host 123.125.59.16 host 192.168.50.110. o E, j6 i m2 W& Z3 ?# x; T
deny ip host 123.125.56.246 host 192.168.50.1104 j' X: u9 F& D( b, G
deny ip host 123.125.58.245 host 192.168.50.110
B: S+ ]7 c' a6 h1 s% ^, D, }deny ip host 123.125.56.248 host 192.168.50.110
' Y; `# V" S9 E1 Ndeny ip host 123.125.58.248 host 192.168.50.110
: ]2 Q! ~) C4 b/ a) ?3 w) {+ _deny ip host 123.125.59.20 host 192.168.50.110
0 ~+ f+ Y( x# C, C) odeny ip host 123.125.44.242 any
3 l$ a8 r2 \/ K, d1 U2 X9 Hdeny ip host 123.125.56.245 any
( A$ J1 ?$ L, i& }9 Y. b6 \- rdeny ip host 123.125.58.247 any- f5 ~" ^' I" `$ W5 @% F) l
deny ip host 123.125.58.246 any
5 a: o2 ?" ^8 N% _/ O2 m3 }8 S; vdeny ip host 123.125.59.16 any
2 b3 F: I3 }2 }2 |# o: p! C' X8 Fdeny ip host 123.125.56.246 any/ l* b: {. @8 L3 O) P
deny ip host 123.125.58.245 any6 ^4 X/ K* }; E
deny ip host 123.125.56.248 any7 j1 L5 J! H2 w# |
deny ip host 123.125.58.248 any
8 u5 }9 c3 l7 u! V3 d& gdeny ip host 123.125.59.20 any
3 a* m2 w( [4 T" f
& d3 v7 s* K8 ~; U/ g x$ O7 Spermit ip any any |