tag:blogger.com,1999:blog-1701506409827015837.comments2012-05-04T18:18:20.671+08:00Li-Ji Honghttps://profiles.google.com/112825245368900221553noreply@blogger.comBlogger148125tag:blogger.com,1999:blog-1701506409827015837.post-67845648347152856712012-05-04T18:18:20.671+08:002012-05-04T18:18:20.671+08:00我設計了這個視覺化小工具，希望對您的問題有所幫助！<br /><a href="http://showipprotocols-tw.blogspot.com/2012/05/ipv4-excel-spreadsheets.html" rel="nofollow">http://showipprotocols-tw.blogspot.com/2012/05/ipv4-excel-spreadsheets.html</a>Li-Jihttp://www.blogger.com/profile/02182692723817355049noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-56733661369695578162012-04-17T20:57:50.499+08:002012-04-17T20:57:50.499+08:00請問要如何計算VLSM與子網路遮照<br />+區分有幾個網段<br />+區分有幾個IP<br />+區分NETWORK ADDRESS 是多少<br />+區分BROADCAST ADDRESS是多少鈕扣熊生活雜貨http://www.blogger.com/profile/12858748672061317078noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-45726234608170977232012-04-16T13:09:58.005+08:002012-04-16T13:09:58.005+08:00有答案了..... 開心的跟大家分享鈕扣熊生活雜貨http://www.blogger.com/profile/12858748672061317078noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-38335370777221906052012-04-10T23:05:27.166+08:002012-04-10T23:05:27.166+08:00謝謝大力幫忙鈕扣熊生活雜貨http://www.blogger.com/profile/12858748672061317078noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-18792836563268273502012-04-10T19:30:36.717+08:002012-04-10T19:30:36.717+08:00(我先問問其他網友: 有沒有朋友願意幫忙他們解答 CCNA 相關疑惑的呢? URL如上。)Li-Jihttp://www.blogger.com/profile/02182692723817355049noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-5808294404493585292012-04-09T21:52:48.505+08:002012-04-09T21:52:48.505+08:00您好，我是ccna的初學者，可否請您幫忙解開以下這些疑惑https://www.facebook.com/pages/The-switch-of-IT-learning/194336403920305鈕扣熊生活雜貨http://www.blogger.com/profile/12858748672061317078noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-287672462840053602012-01-06T12:55:45.304+08:002012-01-06T12:55:45.304+08:00Li-Ji 老師您好：<br /><br />謝謝提供資訊。Big Beck Bloghttp://www.blogger.com/profile/07044996624553246713noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-66118741581359066602012-01-06T11:13:55.413+08:002012-01-06T11:13:55.413+08:00@allofid 也感謝您的支持！Li-Jihttp://www.blogger.com/profile/02182692723817355049noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-53230599470610249612012-01-06T11:11:04.801+08:002012-01-06T11:11:04.801+08:00@Big Beck Blog 我搬到網頁的最下方了！不好意思忘了更新資訊!<br /><br />有關 Packet Tracer 需要 Cisco 網路學院的學員才可以下載。這樣的學員應該不難找到才對！Li-Jihttp://www.blogger.com/profile/02182692723817355049noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-40625942127219951832012-01-06T11:03:37.854+08:002012-01-06T11:03:37.854+08:00Li-Ji 老師 您好：<br />請問packet tacer 檔案文章可提供參考嗎? 我沒有看到連結，另外我想請問如果要學習這個軟體請問有沒有好的建議或學習的網站。Big Beck Bloghttp://www.blogger.com/profile/07044996624553246713noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-67733489273621939152012-01-06T10:31:23.185+08:002012-01-06T10:31:23.185+08:00洪老師 你好<br />你的文章資料非常詳細<br />也讓我吸取了相關的知識<br />使我獲益良多 非常感謝allofidhttp://www.blogger.com/profile/03745147432099846920noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-51836114356542075252012-01-03T13:21:22.899+08:002012-01-03T13:21:22.899+08:00@匿名 其實就跟一般的路由器設定方式差不多，如果您所允許的IP地址數目不到20個，最簡單的方法直接定義一個Standard ACL將所有允許的IP地址包含進來，再將它套用在所有routing網卡的inbound方向。<br /><br />另外因為是L3交換機處理ACL，注意硬體資源的使用狀況，和不要啟用ACL &quot;log&quot;功能，以免變成CPU直接處理封包，大幅拖慢速度。<br /><br />希望有幫助！Li-Jihttp://www.blogger.com/profile/02182692723817355049noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-83922581311917402952012-01-02T14:26:01.037+08:002012-01-02T14:26:01.037+08:00洪老師您好，目前公司的設備為3560G，而我想要做的ACL是by白名單的方式，也就是只允許特定IP通過，非允許IP清單則全部阻擋，請問該如何下手呢?再麻煩請老師解惑，感謝您:)Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-27884075062289061472011-11-08T16:23:14.491+08:002011-11-08T16:23:14.491+08:00@DUNCAN Cisco 已經用 Cisco Configuration Professional 取代 SDM, 建議直接學習 CCP 即可！可以參考這一篇 <a href="http://showipprotocols-tw.blogspot.com/2010/09/cisco-isr-cisco-configuration.html" rel="nofollow"> http://showipprotocols-tw.blogspot.com/2010/09/cisco-isr-cisco-configuration.html</a>Li-Jihttp://www.blogger.com/profile/02182692723817355049noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-76793908128202555172011-11-08T15:00:29.648+08:002011-11-08T15:00:29.648+08:00請問SDM_DEMO_TOOL有沒有外部連結?DUNCANhttp://www.blogger.com/profile/12923435342027142582noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-10351286550977920502011-10-29T22:22:37.205+08:002011-10-29T22:22:37.205+08:00Thanks for sharing.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-32020869052398156972011-10-29T11:24:29.215+08:002011-10-29T11:24:29.215+08:00感謝老師分享!!venterhttp://www.blogger.com/profile/15644313830383417152noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-18297428119981544272011-10-13T17:50:51.251+08:002011-10-13T17:50:51.251+08:00thank youiphone caseshttp://www.callphonecase.com/noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-3651103000570475992011-09-06T16:48:51.402+08:002011-09-06T16:48:51.402+08:00@匿名 您好!<br /><br />我找到這幾篇文章, 發現 &quot;show ip access-list&quot; 看不到 &quot;permit&quot; 數字是系統限制, 只要 ACL 項目是用硬體來處理, 就看不到.<br /><br />解法: 改用 &quot;show tcam interface&quot;<br /><br />希望有幫助!<br /><br />http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/acl.html#wp1033602<br /><br />&quot;When you enter the show ip access-list command, the match count displayed does not include packets processed in hardware.&quot;<br /><br /><br />http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/acl.html<br /><br />&quot;Hardware-supported counters for hardware-supported ACLs, displayed by the show tcam interface command (not supported in PFC3A mode). See this publication: http://www.cisco.com/en/US/docs/ios/interface/command/reference/ir_s6.html#show_tcam_interface&quot;<br /><br /><br />http://jonesncolotd.blogspot.com/2009/09/show-tcam-command-for-access-lists.html<br /><br />&quot;The show tcam interface acl ip shows basically the old-school &#39;show access-list &#39; output with the matches I was looking for.&quot;Li-Jihttp://www.blogger.com/profile/02182692723817355049noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-69483613818990329782011-09-06T15:22:16.789+08:002011-09-06T15:22:16.789+08:00不好意思，我想問個關於在6509上acl的問題<br />就是我們acl新增的數量會很多很多~~~<br />所以有段時間後會希望能調整~~<br />所以得看counts的部份來確認那一筆acl是不是有在用再進行刪除<br />但目前我發現acl在剛設定完時~~~能正常看得到counts的部份<br />但一離開設定模式時只要是permit的部份就都不會再增加了<br />但確定是生效的~~<br />但我們不希望在acl後面加上log~~畢竟加上log後 preformance會明顯提高~~~<br />故想請問老師有啥好建議？Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-43128374799072841352011-04-19T03:35:37.702+08:002011-04-19T03:35:37.702+08:00另外發現cisco packet tracer 5.2 版的bug<br />enable mode 設完密碼後<br />將密碼加密後<br />會無法進入enable mode<br />換成5.3 版後就正常可以進入<br />但是no service password-encryption<br />還是無法解除加密<br />sh r 還是看到加密後的亂碼姜http://www.blogger.com/profile/08779251388899188317noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-62201002516109001442011-04-19T02:26:27.176+08:002011-04-19T02:26:27.176+08:00我發現問題了<br />是圖片的錯誤<br />隨然server 外面打的字是192.168.1.254<br />但是裡面的設定是192.168.1.1<br />router 外面打的IP也是錯誤的姜http://www.blogger.com/profile/08779251388899188317noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-1818357950298683632011-04-19T02:21:32.569+08:002011-04-19T02:21:32.569+08:00你好<br />目前在使用本書的2.11 IOS 災難還原模擬練習 <br />這一章發現有點問題<br />練習檔開出來的Lab2-11.pkt<br />Server IP 192.168.1.254<br />Router IP 192.168.1.1<br />但是在2-70 頁中書上的設定是<br />DEFAULT_GATEWAY=192.168.1.254<br />IP_ADDRESS=192.168.1.254<br />TFTP_SERVER=192.168.1.1<br />以上是否有列印錯誤?姜http://www.blogger.com/profile/08779251388899188317noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-67368808304490380392011-03-22T11:13:48.284+08:002011-03-22T11:13:48.284+08:00依照您的場景來看, R1 本來也只有會有兩筆 EIGRP 的路由表: 10.0.0.0/8, 10.17.32.0/24, 經過 distribute-list 濾掉 10.17.32.0/24 後, 只剩下 10.0.0.0/8, 您的網路當然不會通!<br /><br />Distribute list 如果是 Standard ACL, 篩選條件是路由表的目的地網段位址, 不檢查 subnet mask. 所以以您的例子來看, 就是 &quot;10.17.32.0&quot; 這個 32 bits 數字. 如果是Extend ACL, Source 意義跟 Standard ACL一樣, 但是 Destination 變成是 Subnet Mask.<br /><br />這也是我建議改用 Prefix list 的原因之一, 因為 ACL 在這裡的用法跟一般封包過濾的習慣不一樣, 很容易誤解!<br /><br />回到您原來的問題, 如果要驗證 distribute list 功能, 您必須多產生幾個EIGRP路由資訊讓 distribute list 過濾, 才看得出效果. 最簡單的方法就是R3上面新增幾個 Loopback interface, 例如loop0: 10.1.1.1/24, loop1: 10.2.1.1/24 ... 過濾的效果馬上看得到!<br /><br />&quot;Show access-list&quot; 裡面看到的 &quot;3 matches&quot; 代表這一行比對符合過 &quot;3&quot; 次, 包括路由資訊筆數, 或是封包的個數, 的總和.<br /><br />希望有幫助!Li-Jihttp://www.blogger.com/profile/02182692723817355049noreply@blogger.comtag:blogger.com,1999:blog-1701506409827015837.post-90625318309876275212011-03-21T16:34:42.507+08:002011-03-21T16:34:42.507+08:00洪老師您好:<br />不會很急啦...只是在書上看到這種沒有wildcard mask的用法所以自己實驗了一下...<br /><br />三台router<br /><br />R1與R2間選用10.0.0.0/24<br />R2與R3間選用10.17.32.0/24<br /><br />三台router都開啟eigrp 1<br />network 10.0.0.0<br />auto-summary<br /><br />R2有個ACL 3,裡面就只含deny 10.17.32.0與permit any<br />然後在R2的eigrp裡下了&quot;distribute-list 3 out&quot;這指令<br />R1就無法ping到R2與R3相接的兩個interface IP<br />當然也ping不到10.17.32.0這個IP<br /><br />我發現到當下了&quot;distribute-list 3 out&quot;這指令之後<br />R1原本透過eigrp學到有關10.17.32.0的路徑<br />在路由表整條消失了<br /><br />而我在R2下了show access-list 3,輸出結果為<br />Standard IP access list 3<br /> 10 deny 10.17.32.0 (3 matches)<br /> 20 permit any (2 matches)<br /><br />請問老師這邊3 matches 指的是??<br />而我原本的問題則是access-list 3 deny 10.17.32.0<br />這沒有wildcard mask的指令怎麼決定範圍....<br />謝謝老師Anonymousnoreply@blogger.com