Access Control List (ACL) trafikni IP manzil, protokol va portlar bo‘yicha ruxsat berish yoki rad etish uchun ishlatiladi. Cisco ACL qoidalari yuqoridan pastga tekshiriladi va oxirida yashirin implicit deny mavjud.

Standard ACL misoli

access-list 10 permit 192.168.10.0 0.0.0.255
interface gigabitEthernet 0/0
 ip access-group 10 in

Named extended ACL misoli

ip access-list extended USERS-TO-WEB
 permit tcp 192.168.10.0 0.0.0.255 any eq 80
 permit tcp 192.168.10.0 0.0.0.255 any eq 443
 deny ip any any log
interface gigabitEthernet 0/1
 ip access-group USERS-TO-WEB in

Bu faqat laboratoriya namunasi. Interfeys, yo‘nalish va qoidalar tartibi real topologiyaga mos bo‘lishi kerak.

Tekshirish

show access-lists
show ip interface gigabitEthernet 0/1

Mashq

Lab tarmog‘ida bitta subnetga HTTP/HTTPS ruxsat bering va boshqa IP trafikni rad eting. ACL qo‘llashdan oldin mavjud kirish yo‘llarini tekshiring.