Science Cyber
أَعُوْذُ بِاللِه مِنَ الشََّيْطَانِ الرَّجِيْمِ - بِسْمِ اللهِ الرَّحْمنِ الرَّحِيمِ
Access Control List ( ACL )
ACL Standard
#ip access-list standar NO_Access
#deny host 192.168.10.1
#permit 192.168.11.0 0.0.0.255 ==IP network
#int se0/0/0 ===ip router
#ip access-group NO_Access out
ACL Extended
#ip access-list extended NO_Access
#deny (name_port) host 192.168.1.1 any eq 80
#permit (name_port) 192.168.1.0 0.0.0.255 any ===all network (If one host, you can create : #permit (name_port) 192.168.1.1 host 192.168.2.1 0.0.0.0)
#int fa0/1
#ip access_group NO_Access
#ip access-list standar NO_Access
#deny host 192.168.10.1
#permit 192.168.11.0 0.0.0.255 ==IP network
#int se0/0/0 ===ip router
#ip access-group NO_Access out
ACL Extended
#ip access-list extended NO_Access
#deny (name_port) host 192.168.1.1 any eq 80
#permit (name_port) 192.168.1.0 0.0.0.255 any ===all network (If one host, you can create : #permit (name_port) 192.168.1.1 host 192.168.2.1 0.0.0.0)
#int fa0/1
#ip access_group NO_Access
Configuration Membership, Trunk Vlan and Inter Vlan
Membership (ke client)
#vlan 10
#name komputer
#int range fa0/1-fa0/24
#switch mode access
#switch access vlan 10
Trunking Vlan (antar switch dan router)
#vlan 99
#name trunk
#exit
#int fa0/24
#switchport mode trunk
#switchpor trunk native vlan 99
Inter Vlan (settting at the router)
#int fa0/1.10
#encapsulation dot1q 10
#ip add 192.168.10.254 255.255.255.0
Show vlan
#vlan 10
#name komputer
#int range fa0/1-fa0/24
#switch mode access
#switch access vlan 10
Trunking Vlan (antar switch dan router)
#vlan 99
#name trunk
#exit
#int fa0/24
#switchport mode trunk
#switchpor trunk native vlan 99
Inter Vlan (settting at the router)
#int fa0/1.10
#encapsulation dot1q 10
#ip add 192.168.10.254 255.255.255.0
Show vlan
Subscribe to:
Posts (Atom)