2008年2月27日 星期三

VIP Guest PC Branch Switch ACL Configure

ip access-list extended Guest
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.1
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.2
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.38
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.46
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.47
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.55
deny tcp 172.17.2.152 0.0.0.7 any gt 443
deny tcp 172.17.2.152 0.0.0.7 any lt www
permit ip any any

vlan access-map Guest_Map 17
action forward
match ip address Guest
vlan filter Guest_Map vlan-list 17