ﾚｽ
前ﾚｽ元ﾄﾋﾟ次ﾚｽ
ﾀｲﾄﾙ
Re: 問題ID:6955
ﾌｫｰﾗﾑ
最強WEB問題集CCNP ROUTE
投稿ﾕｰｻﾞ(投稿日)
(2014/1/7)
本文

-----引用(始)-----

access-list 1 permit 10.10.0.0 0.0.31.255の場合
･10.10.1.0/24~10.10.31.0/24
･10.10.0.0/19
のいずれも許可

-----引用(終)-----

ここは検証してないので､確認してからにさせてください｡


-----引用(始)-----

ﾃﾞｨｽﾄﾘﾋﾞｭｰﾄﾘｽﾄに適用する場合は､
access-list <ﾘｽﾄ番号> permit ip <ﾈｯﾄﾜｰｸｱﾄﾞﾚｽ> <ﾜｲﾙﾄﾞｶｰﾄﾞﾏｽｸ> <ｻﾌﾞﾈｯﾄﾏｽｸ> <ﾜｲﾙﾄﾞｶｰﾄﾞﾏｽｸ>
の構文になるのでしょうか｡

-----引用(終)-----

また英語の文書で申し訳ないのですが(日本語版が探せなかった…)､以下のｺﾏﾝﾄﾞﾘﾌｧﾚﾝｽをご覧ください｡
[url=http://www.cisco.com/en/US/docs/ios-xml/ios/security/a1/sec-cr-a2.html#wp4698537840]Cisco IOS Security Command Reference: Commands A to C: aaa max-sessions through algorithm: access-list (IP extended)[/url]


-----引用(始)-----

The following examples show how wildcard bits are used to indicate the bits of the prefix or mask that are relevant. Wildcard bits are similar to the bitmasks that are used with normal access lists. Prefix or mask bits corresponding to wildcard bits set to 1 are ignored during comparisons and prefix or mask bits corresponding to wildcard bits set to 0 are used in comparison.

The following example permits 192.168.0.0 255.255.0.0 but denies any more specific routes of 192.168.0.0 (including 192.168.0.0 255.255.255.0):

access-list 101 permit ip 192.168.0.0 0.0.0.0 255.255.0.0 0.0.0.0
access-list 101 deny ip 192.168.0.0 0.0.255.255 255.255.0.0 0.0.255.255


The following example permits 10.108.0/24 but denies 10.108/16 and all other subnets of 10.108.0.0:

access-list 101 permit ip 10.108.0.0 0.0.0.0 255.255.255.0 0.0.0.0
access-list 101 deny ip 10.108.0.0 0.0.255.255 255.255.0.0 0.0.255.255

-----引用(終)-----

意訳つける元気はありませんでした…
必要だったらﾌｫﾛｰしますので､まずは一度読んでみてください｡

ﾚｽ一覧

前ﾚｽ元ﾄﾋﾟ次ﾚｽ

Ping-tﾓﾊﾞｲﾙTOP

Copyright (c) 2010
Ping-t All rights reserved.