ssid WLAN在核心配置acl访问互联网但是拒绝访问内网其他地址
- 0关注
- 0收藏，61浏览
问题描述：
wlan ssid wifi配置acl规则，192.168.6.0段只允许访问172.100.0.0地址段，拒绝访问其他内网地址段，目前acl规则如下：
acl advanced 3006
rule 0 permit ip source 192.168.6.0 0.0.0.255 destination 172.100.5.4 0.0.0.3 counting
rule 5 permit ip source 192.168.6.0 0.0.0.255 destination 172.100.6.4 0.0.0.3 counting
rule 10 deny ip source 192.168.6.0 0.0.0.255 destination 192.168.0.1 0.0.255.0
rule 15 deny ip source 192.168.6.0 0.0.0.255 destination 192.168.0.0 0.0.255.255
#
interface Vlan-interface6
ip address 192.168.6.1 255.255.255.0
packet-filter 3006 inbound
添加了规则10精确匹配，但是192.168.6.0通过dhcp分配的终端IP还是能访问其他内网网段的网关
所有的vlan网关都在核心交换机上，包括192.168.6.0， 该acl规则在核心交换机上配置
当前访问其他终端IP以及拒绝了，但是网关还能访问，请问还有其他方法吗，
avg.163.com/topic/detail/9051321
avg.163.com/topic/detail/9051327
avg.163.com/topic/detail/9051331
avg.163.com/topic/detail/9051335
avg.163.com/topic/detail/9051341
avg.163.com/topic/detail/9051320
avg.163.com/topic/detail/9051324
avg.163.com/topic/detail/9051328
avg.163.com/topic/detail/9051332
avg.163.com/topic/detail/9051336
avg.163.com/topic/detail/9051323
avg.163.com/topic/detail/9051325
avg.163.com/topic/detail/9051330
avg.163.com/topic/detail/9051334
avg.163.com/topic/detail/9051339
avg.163.com/topic/detail/9051322
avg.163.com/topic/detail/9051326
avg.163.com/topic/detail/9051329
avg.163.com/topic/detail/9051333
avg.163.com/topic/detail/9051338
组网及组网描述：
wlan ssid wifi配置acl规则，192.168.6.0段只允许访问172.100.0.0地址段，拒绝访问其他内网地址段，目前acl规则如下：
acl advanced 3006
rule 0 permit ip source 192.168.6.0 0.0.0.255 destination 172.100.5.4 0.0.0.3 counting
rule 5 permit ip source 192.168.6.0 0.0.0.255 destination 172.100.6.4 0.0.0.3 counting
rule 10 deny ip source 192.168.6.0 0.0.0.255 destination 192.168.0.1 0.0.255.0
rule 15 deny ip source 192.168.6.0 0.0.0.255 destination 192.168.0.0 0.0.255.255
#
interface Vlan-interface6
ip address 192.168.6.1 255.255.255.0
packet-filter 3006 inbound
添加了规则10精确匹配，但是192.168.6.0通过dhcp分配的终端IP还是能访问其他内网网段的网关
所有的vlan网关都在核心交换机上，包括192.168.6.0， 该acl规则在核心交换机上配置
当前访问其他终端IP以及拒绝了，但是网关还能访问，请问还有其他方法吗，
avg.163.com/topic/detail/9051321
avg.163.com/topic/detail/9051327
avg.163.com/topic/detail/9051331
avg.163.com/topic/detail/9051335
avg.163.com/topic/detail/9051341
avg.163.com/topic/detail/9051320
avg.163.com/topic/detail/9051324
avg.163.com/topic/detail/9051328
avg.163.com/topic/detail/9051332
avg.163.com/topic/detail/9051336
avg.163.com/topic/detail/9051323
avg.163.com/topic/detail/9051325
avg.163.com/topic/detail/9051330
avg.163.com/topic/detail/9051334
avg.163.com/topic/detail/9051339
avg.163.com/topic/detail/9051322
avg.163.com/topic/detail/9051326
avg.163.com/topic/detail/9051329
avg.163.com/topic/detail/9051333
avg.163.com/topic/detail/9051338
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论