问个博达路由器里配置的问题！高手帮下忙！

来源：百度知道 编辑：UC知道 时间：2024/05/24 06:26:37
ip access-list standard 1
deny 172.19.2.128 255.255.255.255
deny 172.19.2.212 255.255.255.255
deny 172.19.2.115 255.255.255.255
deny 172.19.2.210 255.255.255.255
deny 172.19.2.211 255.255.255.255
deny 172.19.2.120 255.255.255.255
deny 172.19.2.123 255.255.255.255
deny 172.19.2.119 255.255.255.255
deny 172.19.2.233 255.255.255.255
deny 172.19.2.125 255.255.255.255
deny 172.19.2.244 255.255.255.255
deny 172.19.1.99 255.255.255.255
deny 192.168.1.0 255.255.255.0
permit any
!
ip access-list extended 1000
!
ip access-list extended 200
deny ip 221.203.41.21 255.255.255.255 any
deny ip 222.170.97.163 255.255.255.255 any
deny ip 61.152.145.79 255.255.255.255 any
deny ip 222.208.183.15 255.255.255.255 any
deny ip 219.157.11.83 255.255.255.255 any
deny ip 211.161.159.90 255.255.255.255 any
deny ip 61.172.244.131

ip access-list standard 1
deny 172.19.2.128 255.255.255.255
deny 172.19.2.212 255.255.255.255
deny 172.19.2.115 255.255.255.255
=====================
这些是些标准访问列表, 表示禁止这些地址访问出去. 最后有一条permit any 表示除了禁止的,其它的都可以访问.

ip access-list extended 200
deny ip 221.203.41.21 255.255.255.255 any
......
deny ip 61.172.244.131 255.255.255.255 any
permit ip any any
====================
这是扩展访问列表.. 道理类似, 只不过扩展有源和目的,标准的只有源.

ip nat outside destination static 218.25.53.86 172.19.2.120
ip nat outside destination static 218.25.53.89 172.19.2.211
ip nat outside destination static 218.25.53.90 172.19.2.212
ip nat outside destination static 218.25.53.91 172.19.2.210
ip nat outside destination static 218.25.53.92 172.19.2.119
.....
ip nat inside source static 172.19.2.119 218.25.53.92
ip nat inside source static 172.19.2.125 218.25.53.94
ip nat inside source static 172.19.2.120 21