ACL который НАТ:
читать дальше »
ip access-list extended NAT_ACL
deny ip 192.168.7.0 0.0.0.255 10.10.99.0 0.0.0.255
deny ip host 192.168.7.3 host 172.30.2.42
permit ip host 192.168.7.71 any
permit ip host 192.168.7.13 any
permit ip host 192.168.7.12 any
permit ip host 192.168.7.10 any
permit ip host 192.168.7.9 any
permit ip host 192.168.7.8 any
permit ip host 192.168.7.7 any
permit ip host 192.168.7.5 any
permit ip host 192.168.7.4 any
permit ip host 192.168.7.3 any
permit ip host 192.168.7.2 any
permit ip host 192.168.7.30 any
permit ip host 192.168.7.252 any
permit ip 192.168.10.0 0.0.0.255 any
permit ip host 192.168.7.15 any
permit ip host 192.168.7.18 any
permit ip 192.168.7.0 0.0.0.255 any
deny ip 192.168.6.0 0.0.0.255 192.168.6.0 0.0.0.255
deny ip 192.168.6.0 0.0.0.255 192.168.7.0 0.0.0.255
deny ip 192.168.6.0 0.0.0.255 192.168.8.0 0.0.0.255
permit ip 192.168.6.0 0.0.0.255 any
ACL который отбирает трафик в туннель
Цитата:
ip access-list extended fabrikam
permit ip 192.168.7.0 0.0.0.255 10.10.99.0 0.0.0.255
|
Вот и все ACL
