目的:1.vlan 10内的所有电脑彼此不能通信
9 X" o: Q& @1 `4 ] 2.vlan 10访问外部网络受ACL管控
. Y/ U+ l, j ]' q3 d" T) R0 r 请各位大侠指导一下以下配置是否正确?主要是对VACL不太了解。谢谢!(拓扑如附件图片)
- @# y/ y7 J- D: W
+ C8 j$ |$ e3 u# Y- [) NIP地址配置不在详写,VACL和ACL配置及应用如下:5 R# Q" n1 O# h6 G
! x* L& c2 o2 A a2 B9 P* E! j: C, f S ip access-list extended WW+ U1 J: [4 p2 N7 w
permit ip any 192.168.10.0 0.0.0.255
3 T5 m2 _: K' M9 Q) c1 q5 p+ Q; B4 C- L
vlan access-map MM 10
5 H" ?8 _: ~" C& x& k' n! t# wmatch ip address WW, x" V2 F! K. b( ?: [, [
action drop3 [0 `" }$ J! V# {2 m) U' \
vlan access-map MM 20. G8 v+ x6 D( W: x2 m' u8 F2 e2 Y& G
action forward0 v/ V$ A0 \, {
% m5 F6 R6 Z" s
vlan filter MM vlan-list 10
2 \/ V) f5 X. G& e, O" B3 [: ]/ o8 M. r( A' e6 r
ip access-list extend WP; `5 o" Y1 w* k( E2 [
permit tcp any host 192.168.20.2 eq 80
" V1 Y X, I1 P: G o: V* l0 A( P N5 `, x$ |* u% \
int vlan 10
6 P& O& @$ K" hip access-group WP in
2 ~! k/ i# Q0 B. N- X# V, Q( r2 _+ ?5 |4 R- d5 H4 q( B
|
-
关于VACL求解
|