レス
元トピ
次レスタイトル
Re: 今更ですが...
フォーラム
最強WEB問題集CCNP SWITCH
投稿ユーザ(投稿日)
(2016/4/20)本文
こういうイメージであってますか?
[code]
SW1#show running-config interface fa0/1
Building configuration...
Current configuration : 59 bytes
!
interface FastEthernet0/1
switchport access vlan 5
end
SW1#show running-config interface vlan5
Building configuration...
Current configuration : 83 bytes
!
interface Vlan5
ip address 192.168.1.1 255.255.255.0
ip access-group 1 in
end
SW1#show ip access-lists
Standard IP access list 1
10 permit 192.168.10.0, wildcard bits 0.0.0.255
[/code]
これで、Fa0/1同士を接続したSW1とSW2ではこうなります。
[code]
SW2#show ip interface brief fa0/1
Interface IP-Address OK? Method Status Protocol
FastEthernet0/1 192.168.1.2 YES manual up up
SW2#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
U.U.U
Success rate is 0 percent (0/5)
[/code]
ACLに通したいものを追加したらちゃんと通ります。
[code]
SW1#show ip access-lists
Standard IP access list 1
10 permit 192.168.10.0, wildcard bits 0.0.0.255
20 permit 192.168.1.0, wildcard bits 0.0.0.255
SW2#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/9 ms
SW1#show ip access-lists
Standard IP access list 1
10 permit 192.168.10.0, wildcard bits 0.0.0.255
20 permit 192.168.1.0, wildcard bits 0.0.0.255 (5 matches)
[/code]
ルータと同じことですね :-)
レス一覧
元トピ
次レス
Copyright (c) 2010
Ping-t All rights reserved.