在Cisco catalyst 2950交换机上，通过配置extended ACL来实现端口与IP的绑定。     配置如下： 2950#show runCurrent configuration : 5396 bytes!version 12.1no service padservice timestamps debug uptimeservicetimestamps log uptimeno service password-encryption!hostname 2950!enable secret 5 $1$kJ.v$gF4osmkOwfvOy7vkwI3j/. !ip subnet-zero!no ip domain-lookup!!spanning-tree mode pvstno spanning-tree optimize bpdu transmissionspanning-tree extend system-idspanning-tree uplinkfast!interface FastEthernet0/1switchport access vlan 30switchport mode accessip access-group ip1 inspanning-tree portfast!interface FastEthernet0/2switchport access vlan 30switchport mode accessip access-group ip2 inspanning-tree portfast!interface FastEthernet0/3switchport access vlan 30switchport mode accessip access-group ip3 inspanning-tree portfast!interface FastEthernet0/4switchport access vlan 30switchport mode accessip access-group ip4 inspanning-tree portfast!interface FastEthernet0/5switchport access vlan 30switchport mode accessip access-group ip5 inspanning-tree portfast!interface FastEthernet0/6switchport access vlan 30switchport mode accessip access-group ip6 inspanning-tree portfast!interface FastEthernet0/7switchport access vlan 30switchport mode accessip access-group ip7 inspanning-tree portfastinterface FastEthernet0/8switchport access vlan 30switchport mode accessip access-group ip8 inspanning-tree portfast!interface FastEthernet0/9switchport access vlan 30switchport mode accessip access-group ip9 inspanning-tree portfast!interface FastEthernet0/10switchport access vlan 30switchport mode accessip access-group ip10 inspanning-tree portfast!interface FastEthernet0/11switchport access vlan 30switchport mode accessip access-group ip11 inspanning-tree portfast!interface FastEthernet0/12switchport access vlan 30switchport mode accessip access-group ip12 inspanning-tree portfast!interface FastEthernet0/13switchport access vlan 30switchport mode accessip access-group ip13 inspanning-tree portfast!interface FastEthernet0/14switchport access vlan 30switchport mode accessip access-group ip14 inspanning-tree portfast!interface FastEthernet0/15switchport access vlan 30switchport mode accessip access-group ip15 inspanning-tree portfast!interface FastEthernet0/16switchport access vlan 30switchport mode accessip access-group ip16 inspanning-tree portfast!interface FastEthernet0/17switchport access vlan 30switchport mode accessip access-group ip17 inspanning-tree portfast!interface FastEthernet0/18switchport access vlan 30switchport mode accessip access-group ip18 inspanning-tree portfast!interface FastEthernet0/19switchport access vlan 30switchport mode accessip access-group ip19 inspanning-tree portfast!interface FastEthernet0/20switchport access vlan 30switchport mode accessip access-group ip20 inspanning-tree portfast!interface FastEthernet0/21switchport access vlan 30switchport mode accessip access-group ip21 inspanning-tree portfast!interface FastEthernet0/22switchport access vlan 30switchport mode access ip access-group ip22 inspanning-tree portfast!interface FastEthernet0/23switchport access vlan 30switchport mode accessip access-group ip23 inspanning-tree portfast!interface FastEthernet0/24switchport access vlan 30switchport mode accessip access-group ip24 inspanning-tree portfast!interface GigabitEthernet0/1switchport mode trunk!interface GigabitEthernet0/2spanning-tree stack-port!interface Vlan1no ip addressno ip route-cacheshutdown!interface Vlan100ip address 192.168.100.22 255.255.255.0no ip route-cache!ip default-gateway 192.168.100.254ip http server!ip access-list extended ip1permit ip host 192.168.30.1 anyip access-list extended ip10permit ip host 192.168.30.10 anyip access-list extended ip11permit ip host 192.168.30.11 anyip access-list extended ip12permit ip host 192.168.30.12 anyip access-list extended ip13permit ip host 192.168.30.13 anyip access-list extended ip14permit ip host 192.168.30.14 anyip access-list extended ip15permit ip host 192.168.30.15 anyip access-list extended ip16permit ip host 192.168.30.16 anyip access-list extended ip17permit ip host 192.168.30.17 anyip access-list extended ip18permit ip host 192.168.30.18 anyip access-list extended ip19permit ip host 192.168.30.19 anyip access-list extended ip2permit ip host 192.168.30.2 anyip access-list extended ip20permit ip host 192.168.30.20 anyip access-list extended ip21permit ip host 192.168.30.21 anyip access-list extended ip22permit ip host 192.168.30.22 anyip access-list extended ip23permit ip host 192.168.30.23 anyip access-list extended ip24permit ip host 192.168.30.24 anyip access-list extended ip3permit ip host 192.168.30.3 anyip access-list extended ip4permit ip host 192.168.30.4 anyip access-list extended ip5permit ip host 192.168.30.5 anyip access-list extended ip6ip access-list extended ip5permit ip host 192.168.30.5 anyip access-list extended ip6permit ip host 192.168.30.6 anyip access-list extended ip7permit ip host 192.168.30.7 anyip access-list extended ip8permit ip host 192.168.30.8 anyip access-list extended ip9permit ip host 192.168.30.9 anysnmp-server community private RO!line con 0line vty 0 4password !@#$%loginline vty 5 15password !@#$%login!!end 2950#

评论