Netgear 7000 Series 사용자 설명서

다운로드
페이지 220
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.2
9-26
Access Control Lists (ACLs)
v1.0, May 2008
Web Interface Procedure
To use the Web interface to isolate VLANs on a Layer 3 switch by using ACLs, proceed as 
follows:
1. Create VLAN 24 with IP address 192.168.24.1:
a. From the main menu, select Routing > VLAN > VLAN Routing Wizard. A screen similar 
to the following displays.
Create ACL 103 to permit all other traffic.
(Netgear Switch) (Config)#access-list 103 permit ip any any
Deny all traffic with destination IP address 192.168.48.0/24 and permit all 
other traffic.
(Netgear Switch) (Config)#interface 1/0/24 
(Netgear Switch) (Interface 1/0/24)#ip access-group 102 in 1 
(Netgear Switch) (Interface 1/0/24)#ip access-group 103 in 2 
(Netgear Switch) (Interface 1/0/24)#exit
Deny all traffic with destination IP address 192.168.24.0/24 and permit all 
other traffic.
(Netgear Switch) (Config)#interface 1/0/48 
(Netgear Switch) (Interface 1/0/48)#ip access-group 101 in 1 
(Netgear Switch) (Interface 1/0/48)#ip access-group 103 in 2 
(Netgear Switch) (Interface 1/0/48)#exit
Figure 9-23