レス
元トピ次レス
タイトル
Re: 今更ですが...
フォーラム
最強WEB問題集CCNP SWITCH
投稿ユーザ(投稿日)
(2016/4/20)
本文
こういうイメージであってますか?
[code]
SW1#show running-config interface fa0/1
Building configuration...

Current configuration : 59 bytes
!
interface FastEthernet0/1
switchport access vlan 5
end

SW1#show running-config interface vlan5
Building configuration...

Current configuration : 83 bytes
!
interface Vlan5
ip address 192.168.1.1 255.255.255.0
ip access-group 1 in
end

SW1#show ip access-lists
Standard IP access list 1
10 permit 192.168.10.0, wildcard bits 0.0.0.255
[/code]
これで、Fa0/1同士を接続したSW1とSW2ではこうなります。
[code]
SW2#show ip interface brief fa0/1
Interface IP-Address OK? Method Status Protocol
FastEthernet0/1 192.168.1.2 YES manual up up

SW2#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
U.U.U
Success rate is 0 percent (0/5)
[/code]
ACLに通したいものを追加したらちゃんと通ります。
[code]
SW1#show ip access-lists
Standard IP access list 1
10 permit 192.168.10.0, wildcard bits 0.0.0.255
20 permit 192.168.1.0, wildcard bits 0.0.0.255

SW2#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/9 ms

SW1#show ip access-lists
Standard IP access list 1
10 permit 192.168.10.0, wildcard bits 0.0.0.255
20 permit 192.168.1.0, wildcard bits 0.0.0.255 (5 matches)
[/code]
ルータと同じことですね :-)

レス一覧

元トピ次レス


Ping-tモバイルTOP

Copyright (c) 2010
Ping-t All rights reserved.