Cisco2600的訪問(wèn)列表的配置

我在配置了這樣一個(gè)訪問(wèn)列表， access-list 102 deny tcp any lt 1024 any access-list 102 permit tcp any any 但是卻不能ping對(duì)方網(wǎng)段，我想把1024以下的端口全部封了，但能ping通對(duì)方，該如何配置用的是靜態(tài)路由配置文件如下(部分） Current configuration

我在配置了這樣一個(gè)訪問(wèn)列表，

access-list 102 deny tcp any lt 1024 any

access-list 102 permit tcp any any

但是卻不能ping對(duì)方網(wǎng)段，我想把1024以下的端口全部封了，但能ping通對(duì)方，該如何配置用的是靜態(tài)路由配置文件如下(部分）

Current configuration:

!

version 11.3

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname fenghua02

!

enable secret 5 $1$SGEA$bcQ2n0TKJ4zbIzEy.lpci1

!

chat-script backup ABORT ERROR ABORT BUSY ABORT "" "ATDT 7718690" TIMEOUT 30 CPc

!

!

process-max-time 200

!

interface Ethernet0/0

ip address 199.1.1.0 255.255.255.0

no ip redirects

no ip directed-broadcast

standby 1 priority 110

standby 1 preempt standby 1 authentication cisco

standby 1 ip 132.5.1.155

!

interface Ethernet0/1

no ip address

shutdown

...

interface Serial1/6

ip address 10.1.1.12 255.255.255.0

no ip redirects

ip access-group 102 ininterface Async65

!

ip address 137.5.250.2 255.255.0.0

encapsulation ppp

dialer in-band

dialer string 320012

async default routing

async mode dedicated

!

...

ip classless

ip route 199.1.1.0 255.255.255.0 10.1.1.11

!

access-list 102 deny tcp any lt 1024 any

access-list 102 permit tcp any any

!

聲明：本網(wǎng)頁(yè)內(nèi)容旨在傳播知識(shí)，若有侵權(quán)等問(wèn)題請(qǐng)及時(shí)與本網(wǎng)聯(lián)系，我們將在第一時(shí)間刪除處理。TEL:177 7030 7066 E-MAIL:11247931@qq.com