- 论坛徽章:
- 0
|
在2600的E0/0上做了一个扩展的ACL,同时E0/0做了一个DHCP服务,如果在E0/0上应用ACL,网络的机器就不能获得地址分配,应该怎么做才能做到,或者是应用了DHCP的接口就不能再用ACL来控制IN方向的数据包了。我的相关配置如下:
interface Ethernet0/0
ip address 192.168.0.1 255.255.255.0
ip access-lgroup 101 in
no ip redirects
ip nat inside
half-duplex
。。。。
ip dhcp excluded-address 192.168.0.1
!
ip dhcp pool computer-center-normal-pool
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 211.142.210.98 211.142.226.94
lease infinite
!
access-list 101 permit tcp 192.168.0.0 0.0.0.127 any
access-list 101 permit tcp 192.168.0.0 0.0.0.255 any
access-list 101 permit udp 192.168.0.0 0.0.0.127 any
access-list 101 permit udp 192.168.0.0 0.0.0.255 any
access-list 101 permit icmp 192.168.0.0 0.0.0.127 any
! |
|