telnet ssh ACL
ACL, , telnet . line vty 0 4, , , . , , telnet , vty.
, , telnet (192.168.1.100), .
ACL 1 ACL, . line vty , , , . VTY, ACL , .
, ACL access-group, vty access-class.
ACL - ACL. Cisco IOS Release 8.3. ACL , IP- , .
ACL.
access-list access-list-number {permit|deny} {host|source source-wildcard|any}ACL ( ). "out" () , "out" "in" (). .
interface <interface>ip access-group number {in|out}ACL 10.1.1.x.
interface Ethernet0/0 ip address 10.1.1.1 255.255.255.0 ip access-group 1 inaccess-list 1 permit 10.1.1.0 0.0.0.255ACL
ACL Cisco IOS Release 8.3. ACL , IP- , .
ACL. .
IP
access-list access-list-number [dynamic dynamic-name [timeout minutes]]{deny | permit} protocol source source-wildcarddestination destination-wildcard [precedence precedence] [tos tos] [log | log-input] [time-range time-range-name]ICMP
access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit} icmp source source-wildcard destination destination-wildcard [icmp-type | [[icmp-type icmp-code] | [icmp-message]] [precedence precedence] [tos tos] [log | log-input] [time-range time-range-name]TCP
access-list access-list-number [dynamic dynamic-name [timeout minutes]]{deny | permit} tcp source source-wildcard [operator [port]] destination destination-wildcard [operator [port]] [established][precedence precedence] [tos tos] [log | log-input] [time-range time-range-name]UDP
access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit} udp source source-wildcard [operator [port]] destination destination-wildcard [operator [port]] [precedence precedence] [tos tos] [log | log-input] [time-range time-range-name]ACL ( ).
interface <interface> ip access-group {number|name} {in|out}ACL 10.1.1.x "ping" , "ping" .
interface Ethernet0/1 ip address 172.16.1.2 255.255.255.0 ip access-group 101 in access-list 101 deny icmp any 10.1.1.0 0.0.0.255 echo access-list 101 permit ip any 10.1.1.0 0.0.0.255