{"id":8144,"date":"2012-04-27T11:27:44","date_gmt":"2012-04-27T11:27:44","guid":{"rendered":"http:\/\/tajdini.net\/blog\/2012\/04\/27\/acl-cisco\/"},"modified":"2012-04-27T11:27:44","modified_gmt":"2012-04-27T11:27:44","slug":"acl-cisco","status":"publish","type":"post","link":"https:\/\/tajdini.net\/blog\/cisco-and-networking\/acl-cisco\/","title":{"rendered":"\u0622\u0645\u0648\u0632\u0634 Cisco Access List"},"content":{"rendered":"

Cisco Access List<\/b> \u062f\u0631 \u062a\u0631\u062c\u0645\u0647 \u0644\u063a\u0648\u06cc \u0628\u0647 \u0645\u0639\u0646\u0627\u06cc \u0644\u06cc\u0633\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u06cc\u0633\u06a9\u0648 \u0645\u06cc \u0628\u0627\u0634\u062f \u06a9\u0647 \u0632\u06cc\u0627\u062f \u0647\u0645 \u0627\u0632 \u0645\u0639\u0646\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u062e\u0648\u062f \u062f\u0648\u0631 \u0646\u06cc\u0633\u062a.<\/span>
\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0627\u0632 \u0627\u0633\u0645 \u0622\u0646 \u0628\u0631 \u0645\u06cc \u0622\u06cc\u062f \u0628\u0647 \u0648\u0633\u06cc\u0644\u0647 \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u0628\u0631 \u0631\u0648\u06cc \u0633\u062e\u062a \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0633\u06cc\u0633\u06a9\u0648 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645.<\/span>
\u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0628\u062d\u062b \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0633\u06cc\u0627\u0631 \u06af\u0633\u062a\u0631\u062f\u0647 \u0627\u0633\u062a \u0648 \u062a\u0646\u0647\u0627 \u0628\u0647 \u06cc\u06a9 access list \u0645\u0646\u062a\u0647\u06cc \u0646\u0645\u06cc\u0634\u0648\u062f \u0628\u0647 \u0627\u06cc\u0646 \u0646\u0648\u0639 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 packet filter \u06af\u0641\u062a\u0647 \u0645\u06cc\u0634\u0648\u062f.<\/span>
\u062d\u062a\u0645\u0627 \u062e\u0648\u0627\u0646\u0646\u062f\u06af\u0627\u0646 \u0639\u0632\u06cc\u0632 \u0633\u06cc\u0633\u06a9\u0648 \u0631\u0627 \u0634\u0646\u0627\u062e\u062a\u0647 \u0648 \u0627\u0632 \u06a9\u0627\u0631\u0627\u06cc\u06cc \u0622\u0646 \u062e\u0628\u0631 \u062f\u0627\u0631\u0646\u062f.<\/span>
\u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0648\u0631\u0648\u062f\u06cc \u0627\u06cc\u0646\u062a\u0631\u0646\u062a 80 \u062f\u0631\u0635\u062f \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0645\u0627 \u0628\u0627 \u0622\u0646\u0647\u0627 \u06a9\u0627\u0631 \u0645\u06cc \u06a9\u0646\u06cc\u0645 Cisco \u0647\u0633\u062a \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u0628\u0627 \u0628\u06a9\u0627\u0631 \u06af\u06cc\u0631\u06cc Access list \u062f\u0631 \u0622\u0646\u0647\u0627 \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0627\u062f\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u062e\u0648\u062f \u0628\u0647 \u0627\u0631\u0645\u063a\u0627\u0646 \u0628\u06cc\u0627\u0648\u0631\u06cc\u0645. \u0646\u0627 \u06af\u0641\u062a\u0647 \u0646\u0645\u0627\u0646\u062f \u06a9\u0647 \u0645\u0647\u0645\u062a\u0631\u06cc\u0646 \u06af\u0632\u06cc\u0646\u0647 \u062f\u0631 Packet filter \u0647\u0627 \u06a9\u0627\u0646\u0641\u06cc\u06af \u062e\u0648\u0628 \u0622\u0646\u0647\u0627\u0633\u062a \u0646\u0647 Brand \u06cc\u0627 \u0645\u062f\u0644 \u062f\u0633\u062a\u06af\u0627\u0647. \u0634\u0645\u0627 \u0627\u06af\u0631 \u0628\u0627 \u0627\u0635\u0648\u0644 Packet Filtering \u0622\u0634\u0646\u0627\u06cc\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u0628\u0631 \u0631\u0648\u06cc \u0647\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u06cc\u0627 \u0633\u062e\u062a \u0627\u0641\u0632\u0627\u0631\u06cc \u062a\u0646\u0647\u0627 \u0628\u0627 \u0622\u0645\u0648\u062e\u062a\u0646 Syntax \u0622\u0646 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u062f \u06cc\u06a9 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u062f.<\/span>
\u0645\u0646 \u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0628\u0647 \u062a\u0648\u0636\u06cc\u062d \u0642\u0648\u0627\u0626\u062f \u0622\u0646 \u062f\u0631 \u0633\u06cc\u0633\u06a9\u0648 \u0645\u06cc\u067e\u0631\u062f\u0627\u0632\u0645.<\/span>
\u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f access list \u0634\u0645\u0627 \u0646\u06cc\u0627\u0632 \u0628\u0647 IOS \u0647\u0627\u06cc \u0628\u0627\u0644\u0627\u062a\u0631 \u0627\u0632 \u0648\u0631\u0698\u0646 8.3 \u062f\u0627\u0631\u06cc\u062f.<\/span>
\u062f\u0648 \u0645\u0631\u062d\u0644\u0647 \u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f \u06cc\u06a9 access list \u062f\u0627\u0631\u06cc\u0645. \u0627\u0648\u0644 \u0645\u06cc\u0628\u0627\u06cc\u0633\u062a ACL \u0645\u0631\u0628\u0648\u0637\u0647 \u0631\u0627 \u0646\u0648\u0634\u062a\u0647 \u0648 \u062f\u0648\u0645 \u0622\u0646 \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u06cc\u0645.<\/span>
\u0628\u062f\u06cc\u0647\u06cc\u0633\u062a \u062f\u0631 \u0635\u0648\u0631\u062a \u0639\u062f\u0645 \u0627\u0639\u0645\u0627\u0644 ACL \u0628\u0647 \u06cc\u06a9 \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 ACL \u0645\u0630\u06a9\u0648\u0631 \u0628\u0644\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0645\u0627\u0646\u062f.<\/span>
\u067e\u0631 \u06a9\u0627\u0631\u0628\u0631\u062f\u062a\u0631\u06cc\u0646 ACL \u0647\u0627 IP Access list \u0627\u0633\u062a. \u0632\u06cc\u0631\u0627 \u0627\u06a9\u062b\u0631 \u062a\u0631\u0627\u0641\u06cc\u06a9\u0647\u0627 \u0628\u0631 \u0631\u0648\u06cc \u067e\u0631\u0648\u062a\u06a9\u0644 IP \u0627\u0646\u062a\u0642\u0627\u0644 \u0645\u06cc \u06cc\u0627\u0628\u062f.<\/span>
\u062e\u0648\u062f IP access list \u062f\u0648 \u0646\u0648\u0639 \u0627\u0633\u062a. Standard \u0648 Extended<\/span>
Standard \u062a\u0646\u0647\u0627 \u0628\u0631 \u0627\u0633\u0627\u0633 SOURCE IP address \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u062f.<\/span>
Extended \u0628\u0631 \u062d\u0633\u0628 SOURCE and DESTINATION IP address \u0648 SOURCE and DESTINATION Port \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.<\/span>
\u0645\u0639\u0645\u0648\u0644\u0627 \u0628\u0631\u0627\u06cc \u0646\u0627\u0645 \u06af\u0630\u0627\u0631\u06cc access list \u0647\u0627 \u0627\u0632 \u0627\u0639\u062f\u0627\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u0634\u0648\u062f. \u06a9\u0647 \u0627\u0632 \u0634\u0645\u0627\u0631\u0647 1 \u062a\u0627 99 \u0628\u0631\u0627\u06cc Standard \u0648 100 \u062a\u0627 199 \u0628\u0631\u0627\u06cc Extended \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u0634\u0648\u062f. \u0627\u0644\u0628\u062a\u0647 \u0627\u0639\u062f\u0627\u062f 1300 \u062a\u0627 1999 \u0628\u0631\u0627\u06cc Standard \u0648 2000 \u062a\u0627 2699 \u0628\u0631\u0627\u06cc Extended \u0631\u0632\u0631\u0648 \u0634\u062f\u0647 \u0627\u0646\u062f.<\/span><\/p>\n

\u0642\u0627\u0626\u062f\u0647 \u06cc\u06a9 Standard Access list \u0628\u062f\u06cc\u0646 \u0635\u0648\u0631\u062a \u0627\u0633\u062a:<\/span> <\/p>\n

\n
access-list access-list-number {permit|deny} {host|source source-wildcard|any}<\/b><\/span><\/div>\n<\/blockquote>\n

\u06cc\u0639\u0646\u06cc \u062f\u0631 \u0627\u0628\u062a\u062f\u0627 \u0645\u06cc\u0628\u0627\u06cc\u0633\u062a \u0639\u0628\u0627\u0631\u062a access-list \u0631\u0627 \u062a\u0627\u06cc\u067e \u0646\u0645\u0648\u062f\u0647 \u0633\u067e\u0633 \u06cc\u06a9 \u0634\u0645\u0627\u0631\u0647 \u0628\u0647 \u0622\u0646 \u0627\u062e\u062a\u0635\u0627\u0635 \u0645\u06cc\u062f\u0647\u06cc\u0645 \u0648 \u062f\u0631 \u0622\u062e\u0631 \u0648\u0638\u06cc\u0641\u0647 \u0622\u0646 \u06a9\u0647 \u0646\u0627\u0628\u0648\u062f\u06cc \u06cc\u0627 \u0627\u062c\u0627\u0632\u0647 \u0639\u0628\u0648\u0631 \u06cc\u06a9 \u067e\u06a9\u062a \u0647\u0633\u062a \u0631\u0627 \u0645\u0634\u062e\u0635 \u0645\u06cc\u06a9\u0646\u06cc\u0645.<\/span><\/p>\n

\u062f\u0631 \u0645\u062b\u0627\u0644 \u0632\u06cc\u0631 \u0645\u06cc\u062e\u0648\u0627\u0647\u06cc\u0645 \u062a\u0646\u0647\u0627 \u0628\u0647 \u06cc\u06a9 \u0631\u0646\u062c IP \u0627\u062c\u0627\u0632\u0647 \u0639\u0628\u0648\u0631 \u0627\u0632 \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 Ethernet0 \u0631\u0627 \u0628\u062f\u0647\u06cc\u0645.<\/span><\/p>\n

\u0627\u0628\u062a\u062f\u0627 access list \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u0631\u0627 \u0645\u06cc \u0646\u0648\u06cc\u0633\u06cc\u0645<\/span> <\/p>\n

\n
access-list 10 permit 192.168.20.0 0.0.0.255
access-list 10 deny any<\/b><\/span><\/div>\n<\/blockquote>\n

\u0633\u067e\u0633 \u0628\u0647 \u06cc\u06a9 \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u0627\u0639\u0645\u0627\u0644 \u0645\u06cc\u06a9\u0646\u06cc\u0645<\/span> <\/p>\n

\n
interface ethernet0
ip access-group 10 in
exit
<\/b><\/span><\/div>\n<\/blockquote>\n

Extended access list \u0647\u0627 \u0631\u0627 \u0648\u0642\u062a\u06cc \u0628\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u06af\u06cc\u0631\u06cc\u0645 \u06a9\u0647 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u0646\u0639\u0637\u0627\u0641 \u0628\u06cc\u0634\u062a\u0631\u06cc \u062f\u0627\u0631\u06cc\u0645. \u0645\u062b\u0644\u0627 \u0648\u0642\u062a\u06cc \u0646\u06cc\u0627\u0632 \u0628\u0647 ***** \u06cc\u06a9 \u067e\u0648\u0631\u062a \u062e\u0627\u0635 \u0627\u0633\u062a.<\/span>
\u0642\u0627\u0626\u062f\u0647 \u0622\u0646 \u0628\u062f\u06cc\u0646 \u0635\u0648\u0631\u062a \u0627\u0633\u062a:<\/span> <\/p>\n

\n
access-list access-list-number {deny|permit} protocol source source-wildcard destination destination-wildcard [precedence precedence][tostos][log]<\/b><\/span><\/div>\n<\/blockquote>\n

\u067e\u0633 \u0627\u0632 \u0639\u0628\u0627\u0631\u062a access-list \u0645\u06cc\u0628\u0627\u06cc\u0633\u062a \u0634\u0645\u0627\u0631\u0647 \u0622\u0646 \u0631\u0627 \u0627\u0632 \u0647\u0645\u0627\u0646 \u0631\u0646\u062c \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u0645 .\u0633\u067e\u0633 action \u0622\u0646 \u0631\u0627 \u06a9\u0647 \u062d\u0630\u0641 \u06cc\u0627 \u0639\u0628\u0648\u0631 packet \u0627\u0633\u062a \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0631\u062f\u0647 \u0648 \u0622\u062f\u0631\u0633 \u0645\u0642\u0635\u062f \u0648 \u0645\u0628\u062f\u0627 \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u067e\u0631\u0648\u062a\u06a9\u0644 \u06cc\u0627 \u067e\u0648\u0631\u062a \u0622\u0646 \u0631\u0627 \u0645\u0634\u062e\u0635 \u0645\u06cc\u06a9\u0646\u06cc\u0645.<\/span>
\u0628\u0631\u0627\u06cc \u0646\u0648\u0634\u062a\u0646 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0645\u0627 \u0645\u062c\u0627\u0632 \u0628\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0647\u0627\u06cc \u0632\u06cc\u0631 \u0647\u0633\u062a\u06cc\u0645:<\/span> <\/p>\n

\n
eigrp, gre, icmp, igmp, igrp, ip, ipinip, nos, ospf, tcp, or udp<\/b><\/span><\/div>\n<\/blockquote>\n

\u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646 \u0627\u0632 \u06cc\u06a9 keyword \u0628\u06cc\u0646 0 \u062a\u0627 255 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0647\u0631 \u06a9\u062f\u0627\u0645 \u0628\u06cc\u0627\u0646\u06af\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644\u06cc \u062e\u0627\u0635 \u0627\u0633\u062a.<\/span>
\u0627\u06af\u0631 \u0645\u0627 \u0639\u0628\u0627\u0631\u062a ip \u0631\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u0645 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u062a\u0645\u0627\u0645\u06cc \u067e\u0631\u0648\u062a\u06a9\u0644 \u0647\u0627\u06cc IP \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u0634\u0648\u062f.<\/span>
\u0628\u0631\u0627\u06cc \u0645\u0634\u062e\u0635 \u06a9\u0631\u062f\u0646 \u0647\u0631 \u0622\u062f\u0631\u0633\u06cc (any) \u0646\u06cc\u0632 \u0628\u0627\u06cc\u062f \u0627\u0632 \u0639\u0628\u0627\u0631\u062a 255.255.255.255 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f.<\/span><\/p>\n

Option \u0647\u0627\u06cc precedence \u0648 tos \u0646\u06cc\u0632 \u062f\u0648 \u0627\u0628\u0632\u0627\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631\u06cc\u0633\u062a \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0647\u0627\u06cc \u062e\u0627\u0635 \u0628\u0647 \u06a9\u0627\u0631 \u0645\u06cc \u0631\u0648\u062f. \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0633\u0631\u0648\u06cc\u0633 \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u0631\u0627 \u0628\u0627 \u0648\u0627\u0631\u062f \u06a9\u0631\u062f\u0646 \u06a9\u062f \u0622\u0646 \u06a9\u0647 precedence \u0627\u0632 0 \u062a\u0627 7 \u0648 tos \u0627\u0632 0 \u062a\u0627 15 \u0645\u0634\u062e\u0635 \u0634\u062f\u0647 \u0627\u0646\u062f \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f.<\/span>
Log \u0646\u06cc\u0632 \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631\u06cc \u062f\u06cc\u06af\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0622\u0646 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u0627\u0632 access list \u062e\u0648\u062f \u06af\u0632\u0627\u0631\u0634 \u0628\u0631\u062f\u0627\u0631\u06cc\u0645.<\/span><\/p>\n

\u0628\u0627 \u0645\u062b\u0627\u0644\u06cc \u0628\u06cc\u0634\u062a\u0631 \u0628\u0627 Extended access list \u0622\u0634\u0646\u0627 \u0645\u06cc\u0634\u0648\u06cc\u0645:<\/span><\/p>\n

\u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u0627\u0628\u0646\u062a 217.219.102.0\/24 \u0628\u0627 \u0622\u062f\u0631\u0633 192.168.20.27 \u0628\u0627 \u0647\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644\u06cc<\/span> <\/p>\n

\n
access-list 105 permit ip 217.219.102.0 0.0.0.255 192.168.20.27 0.0.0.0<\/span><\/div>\n<\/blockquote>\n

\u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0622\u062f\u0631\u0633 217.219.108.15 \u0628\u0647 \u0633\u0627\u0628\u0646\u062a 192.168.20.0\/24 \u0628\u0627 \u0647\u0631 \u067e\u0631\u0648\u062a\u06a9\u0644\u06cc<\/span> <\/p>\n

\n
access-list 105 permit ip 217.219.108.15 0.0.0.0 192.168.20.0 0.0.0.255<\/span><\/div>\n<\/blockquote>\n

\u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u0627\u0628\u0646\u062a 10.0.0.0\/24 \u0628\u0647 \u0633\u0627\u0628\u0646\u062a 172.22.18.0\/24 \u062a\u0646\u0647\u0627 \u0628\u0627 \u067e\u0648\u0631\u062a 23 (telnet)<\/span> <\/p>\n

\n
access-list 105 permit tcp 10.0.0.0 0.255.255.255 172.22.18.0 0.0.0.255 eq 23<\/span><\/div>\n<\/blockquote>\n

\u0639\u062f\u0645 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0645\u0647 \u062c\u0627 \u0628\u0647 \u0647\u0645\u0647 \u062c\u0627 \u0631\u0648\u06cc \u067e\u0648\u0631\u062a snmp \u06a9\u0647 161 \u0627\u0633\u062a<\/span> <\/p>\n

\n
access-list 105 permit udp any any eq 161<\/span><\/div>\n<\/blockquote>\n

\u0639\u062f\u0645 \u0627\u062c\u0627\u0632\u0647 \u067e\u06cc\u0646\u06af (echo reply icmp type 0) \u0627\u0632 \u0633\u0627\u0628\u0646\u062a 172.12.0.0\/16 \u0628\u0647 \u0647\u0645\u0647 \u062c\u0627<\/span> <\/p>\n

\n
access-list 105 deny icmp 172.12.0.0 0.0.255.255 any 0<\/span><\/div>\n<\/blockquote>\n

\u0639\u062f\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0644\u06cc\u0647 packet \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631<\/span> <\/p>\n

\n
access-list 105 deny ip any any<\/span><\/div>\n<\/blockquote>\n

\u0648 \u062f\u0631 \u0622\u062e\u0631 \u0627\u0639\u0645\u0627\u0644 \u0622\u0646 \u0628\u0647 \u06cc\u06a9 \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633<\/span> <\/p>\n

\n
interface serial0<\/span><\/div>\n
ip access-group 105 out<\/span>
exit<\/span><\/div>\n<\/blockquote>\n

\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0645\u06cc\u062f\u0627\u0646\u06cc\u062f \u062a\u0631\u062a\u06cc\u0628 \u062f\u0631 access list \u0647\u0627 \u0645\u0647\u0645 \u0627\u0633\u062a.<\/span>
\u0628\u0647 \u0647\u0645\u06cc\u0646 \u0639\u0644\u062a \u0648\u0642\u062a\u06cc \u06a9\u0647 \u0644\u06cc\u0633\u062a ACL \u0647\u0627 \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc\u06a9\u0646\u06cc\u0645 \u06cc\u06a9 \u0633\u0631\u06cc \u0627\u0639\u062f\u0627\u062f \u06a9\u0646\u0627\u0631 \u0622\u0646\u0647\u0627 \u0645\u06cc\u0646\u0648\u06cc\u0633\u062f \u06a9\u0647 \u0628\u06cc\u0627\u0646\u06af\u0631 \u0627\u0648\u0644\u0648\u06cc\u062a \u0622\u0646\u0647\u0627\u0633\u062a.<\/span>
\u0645\u0627 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u062e\u0648\u062f \u062f\u0633\u062a\u06cc \u0622\u0646\u0647\u0627 \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u0645:<\/span><\/p>\n

\u0645\u062b\u0627\u0644 1: <\/span>
ACL \u0645\u0627 \u0628\u062f\u06cc\u0646 \u0635\u0648\u0631\u062a \u0627\u0633\u062a<\/span> <\/p>\n

\n
Router#show access-list<\/span>
Extended IP access list 101<\/span>
10 permit tcp any any<\/span>
20 permit udp any any<\/span>
30 permit icmp any any<\/span><\/div>\n<\/blockquote>\n

\u062d\u0627\u0644 \u0645\u06cc\u062e\u0648\u0627\u0647\u06cc\u0645 \u062f\u0631 \u0627\u0628\u062a\u062f\u0627\u06cc \u0622\u0646 \u06cc\u06a9 \u062e\u0637 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u0645<\/span> <\/p>\n

\n
Router#configure terminal<\/span>
Enter configuration commands, one per line. End with CNTL\/Z.<\/span>
Router(config)#ip access-list extended 101<\/span>
Router(config-ext-nacl)#5 deny tcp any any eq telnet<\/span>
Router(config-ext-nacl)#exit<\/span>
Router(config)#exit<\/span>
Router#<\/span><\/div>\n<\/blockquote>\n

\u0647\u0645 \u0627\u06a9\u0646\u0648\u0646 \u0628\u062f\u06cc\u0646 \u0635\u0648\u0631\u062a \u0645\u06cc \u0634\u0648\u062f.<\/span> <\/p>\n

\n
Router#show access-list<\/span>
Extended IP access list 101<\/span>
5 deny tcp any any eq telnet<\/span>
10 permit tcp any any<\/span>
20 permit udp any any<\/span>
30 permit icmp any any<\/span>
Router#<\/span><\/div>\n<\/blockquote>\n

\u0645\u062b\u0627\u0644 2:<\/span><\/p>\n

\u0642\u0628\u0644\u0627 \u06cc\u06a9\u0628\u0627\u0631 \u0628\u0647 \u0622\u0646 \u06cc\u06a9 \u062e\u0637 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0627\u06cc\u0645. \u0628\u0631\u0627\u06cc \u0628\u0627\u0631 \u062f\u0648\u0645 \u0686\u0646\u06cc\u0646 \u0639\u0645\u0644 \u0645\u06cc\u06a9\u0646\u06cc\u0645<\/span> <\/p>\n

\n
routerB#show access-lists<\/span>
Extended IP access list 101<\/span>
10 permit tcp any any<\/span>
15 permit tcp any host 172.162.2.9<\/span>
20 permit udp host 172.16.1.21 any<\/span>
30 permit udp host 172.16.1.22 any<\/span><\/p>\n

routerB#configure terminal<\/span>
Enter configuration commands, one per line. End with CNTL\/Z.<\/span>
routerB(config)#ip access-list extended 101<\/span>
routerB(config-ext-nacl)#18 per tcp any host 172.162.2.11<\/span>
routerB(config-ext-nacl)#^Z<\/span><\/div>\n<\/blockquote>\n

\u062a\u0631\u062a\u06cc\u0628 \u0622\u0646 \u0628\u062f\u06cc\u0646 \u0635\u0648\u0631\u062a \u0645\u06cc \u0634\u0648\u062f:<\/span> <\/p>\n

\n
routerB#show access-lists<\/span>
Extended IP access list 101<\/span>
10 permit tcp any any<\/span>
15 permit tcp any host 172.162.2.9<\/span>
18 permit tcp any host 172.162.2.11<\/span>
20 permit udp host 172.16.1.21 any<\/span>
30 permit udp host 172.16.1.22 any<\/span>
routerB#<\/span><\/div>\n<\/blockquote>\n

\u0646\u06a9\u062a\u0647 1:<\/b><\/span>
\u0628\u0631\u0627\u06cc \u0628\u0631\u062f\u0627\u0634\u062a\u0646 \u06cc\u06a9 access list \u0645\u06cc\u0628\u0627\u06cc\u0633\u062a \u0647\u0645\u0627\u0646 ACL \u0631\u0627 \u062a\u0627\u06cc\u067e \u0646\u0645\u0648\u062f\u0647 \u0648 \u062f\u0631 \u0627\u0628\u062a\u062f\u0627\u06cc \u0633\u0637\u0631 \u06cc\u06a9 no \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u0645:<\/span> <\/p>\n

\n
no access-list 105 deny ip any any<\/span><\/div>\n<\/blockquote>\n

\u0646\u06a9\u062a\u06472:<\/b><\/span>
\u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 ACL \u0647\u0627 \u0627\u0632 \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u06a9\u0646\u06cc\u0645.<\/span> <\/p>\n

\n
show access-list<\/span><\/div>\n<\/blockquote>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Cisco Access List \u062f\u0631 \u062a\u0631\u062c\u0645\u0647 \u0644\u063a\u0648\u06cc \u0628\u0647 \u0645\u0639\u0646\u0627\u06cc \u0644\u06cc\u0633\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u06cc\u0633\u06a9\u0648 \u0645\u06cc \u0628\u0627\u0634\u062f \u06a9\u0647 \u0632\u06cc\u0627\u062f \u0647\u0645 \u0627\u0632 \u0645\u0639\u0646\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u062e\u0648\u062f \u062f\u0648\u0631 \u0646\u06cc\u0633\u062a.\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0627\u0632 \u0627\u0633\u0645 \u0622\u0646 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[221,229],"tags":[249,259,264,90],"class_list":["post-8144","post","type-post","status-publish","format-standard","hentry","category-cisco-and-networking","category-network-and-protocol-security","tag-firewall","tag-network-security","tag-persian","tag-cisco"],"_links":{"self":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8144","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/comments?post=8144"}],"version-history":[{"count":0,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8144\/revisions"}],"wp:attachment":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/media?parent=8144"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/categories?post=8144"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/tags?post=8144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}