公司有一台7506核心,下面接着一台s5130接入,配置了dhcp snooping,arp检测,端口安全,在接入交换机上,挂着一台东芝多功能复印机(vlan10),在交换机中接入一台电脑(vlan10),可以ping通这个打印机,可以正常安装打印机驱动,可以打印,就是无法访问这个打印机的http端口,请教大神这个是什么情况,应该如何解决?
rule 5 permit udp destination-port eq dns
rule 9 permit tcp destination-port eq 6129
rule 10 permit tcp destination-port eq 6299
rule 15 permit icmp
rule 30 deny tcp destination-port eq 23
rule 35 deny tcp destination-port eq 68
rule 40 permit destination 10.16.0.0 0.0.255.255 destination-port eq 135
rule 45 permit destination 10.16.0.0 0.0.255.255 destination-port eq 137
rule 50 permit destination 10.16.0.0 0.0.255.255 destination-port eq 138
rule 55 permit destination 10.16.0.0 0.0.255.255 destination-port eq 139
rule 56 permit tcp souce 10.172.63.0 0.0.0.255 destination 10.172.41.0 0.0.0.255
rule 60 deny tcp destination-port eq 135 rule 65 deny tcp destination-port eq 137
rule 70 deny tcp destination-port eq 138 rule 75 deny tcp destination-port eq 139
rule 80 deny tcp destination-port eq 3389
rule 85 permit tcp destination 10.172.14.2 0.0.0.0 destination-port eq 445
rule 90 permit tcp destination 10.172.14.1 0.0.0.0 destination-port eq 445
rule 120 permit ip destination 10.1.0.0 0.0.255.255
rule 125 permit ip destination 10.2.0.0 0.0.255.255
rule 130 permit ip destination 10.17.0.0 0.0.255.255
rule 135 permit ip destination 10.15.0.0 0.0.255.255
rule 140 permit ip destination 10.16.0.0 0.0.255.255
rule 145 permit ip destination 10.23.0.0 0.0.255.255
rule 150 permit tcp destination 10.172.11.0 0.0.0.255
rule 180 permit tcp destination 10.172.42.0 0.0.0.255
rule 200 deny ip
这个是vlan 10下调用的acl
(0)
最佳答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
直连是好的,可以ping,也可以访问http