1个回答
ip access-list standard 1 deny 172.19.2.128 255.255.255.255 deny 172.19.2.212 255.255.255.255 deny 172.19.2.115 255.255.255.255 =====================这些是些标准访问列表, 表示禁止这些地址访问出去. 最后有一条permit any 表示除了禁止的,其它的都可以访问. ip access-list extended 200 deny ip 221.203.41.21 255.255.255.255 any ......deny ip 61.172.244.131 255.255.255.255 any permit ip any any ====================这是扩展访问列表.. 道理类似, 只不过扩展有源和目的,标准的只有源. ip nat outside destination static 218.25.53.86 172.19.2.120 ip nat outside destination static 218.25.53.89 172.19.2.211 ip nat outside destination static 218.25.53.90 172.19.2.212 ip nat outside destination static 218.25.53.91 172.19.2.210 ip nat outside destination static 218.25.53.92 172.19.2.119 .....ip nat inside source static 172.19.2.119 218.25.53.92 ip nat inside source static 172.19.2.125 218.25.53.94 ip nat inside source static 172.19.2.120 218.25.53.86 ===========这些表示是做nat的地址.